<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="7001">
<package pkgid="d93a07df129f9efde46bb8ffb1f56cc0ca5dc6d84d8835e3e17ae9884a1f6999" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="b21510425a2465d75867ed9793fe804497ad62d4889bd532bcda73067148e9f4" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="b8974dd8dc30331491eb250778d6c3d9efb64ad1a02544a974899d2d243773f6" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="c8fa0e8285016fc0402d90e483d50da18fed8bbfb69ea95af377f985f51da2a6" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="3b573d74d69c58dec26e17470a65616f829b4a534f2d7c66648d1f07b07fdfa1" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="d92fbac8f9ecc72afbd635e460ca70434545729a406521ce6d321a0a2f59ae82" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="51fe93732d713181e7dded9805b9812e1c03cf591827bb733ff2f1dc764400d0" name="389-ds-base-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="5c3b899c6e499ab136a5ada7658285f73e60d742737d856215a57ab7b5357a8e" name="389-ds-base-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="8c0472489ef476aa7813d4a531efa954b355087cc27e2b1a8a083a407da08d0d" name="389-ds-base-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="d4fde8d6643e5d31368235cfce26a43964658893859e0c0e01ba44d68843cb48" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="7a13fd0c7c40c09ab39e28885976c7ac6e677ffd24f7fcd8776612313baaed76" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="bc91329ff609473996475728815ac6cfee2543f6683f57db46da2c2974a2e470" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="3703be4e1a707a4add57452344cb08cc635bf37e128b7e6810c7e800d1048e0e" name="389-ds-base-help" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="66c489d6dec025917d7c46d56dadbf9a9eaf98e4ff762d966ce0fb2b0d36621c" name="389-ds-base-help" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="7d923849194ff269947135186fb2939b02d5698281495068f44c8ac662f89536" name="389-ds-base-help" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="c607f70713aeb8df06954a0c16cde45b13abf8759c2cf9052080305437cf5ee9" name="389-ds-base-legacy-tools" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="3a5b558d91d0571138141496189caaa72c7ee3b976f02a050c484cc380ed0d53" name="389-ds-base-legacy-tools" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="b44c7fddb13d8a5f0cbf2710d0a65319e2d2bb63eeb8a973f31fb2a50ab30483" name="389-ds-base-legacy-tools" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="92e7277e8cc835de3aff76d4e939019e64881d343011f2d32cb778d34961843a" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="13e2a2b74d277c209c3c6ae5c7679882ca44594e6a42f15428d5a0866e9240f2" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="c4f5b445269983eeb1bb6173a818a010d26c098a637de560a5f2facc33fbd2ba" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="9fb8dccabedac1b86c3df1febf41f66fed8998999a7193a8f0e7d716f2101a7f" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="3d890637c85b8313ffdf08fccd42ec7f05473cddbe53a83ca8b6ee46fe40ef3c" name="GraphicsMagick-c++" arch="x86_64">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="9c505365e44d5828c225d0cf3abe240ad7c6f02a64e1944a9ebd6486823397dc" name="GraphicsMagick-c++-devel" arch="x86_64">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="98983d55b0227d307028355002245bd02782f248e9fe2d3dcf31bae9c9accd46" name="GraphicsMagick-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="320220c4a5c1fd513d70462ff103ece38b66a99a17662cde5843409709db07dd" name="GraphicsMagick-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="bf52283a4d67abfa767a580b3b3d5c15fcc059c8641f1881e0745f1eaff1d49f" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="6f33dc2368e6d1b203fc1b89ff1474790acf4c891b83d1b6540d9b3aecaa49ff" name="GraphicsMagick-help" arch="noarch">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="27f69de77dfaaf672e70bf66782947cf5a9b8d982196d664b5609663ab1b893c" name="GraphicsMagick-perl" arch="x86_64">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="f3f379bcdb33454863b5c426e5da132ef985f5cd4192911bad08ddda8a9f03e8" name="ImageMagick" arch="x86_64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="def35ccdf7be229eb0b22ed7ffcfca9e6c9d237edc8d34aa6886bba87f6aa7a9" name="ImageMagick" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="65dd2f7ac78b3a8efb08bc3c3f4c3fd37744ad24b3fc3c6375a3f33152dfc093" name="ImageMagick" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="72534dc782e4290b54704eb129bf9b92146ee54a00007c254a39ccf4ab47b126" name="ImageMagick" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="240921b69abe47ec670a47e2c10cd8674d4b3eb4ef3fa2ba1d12ae0503224b79" name="ImageMagick" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="b9a32fab40975250218e809a80630e74163c9b5715eafa731ee72db8f278d16b" name="ImageMagick" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="fb2752a339a397e6d1e8272187beef98bb2998cffe18938b47b4ffb2074d5f31" name="ImageMagick-c++" arch="x86_64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="9e39b785fe3b4031498ad55b81dcdb05c05a19c9e4a2669005dd947d9b399fdc" name="ImageMagick-c++" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="d70a9e5fcb2703a02541e2e23fe99dad6eaa359758f7fc1d71c9f1558f99ecaf" name="ImageMagick-c++" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="4abbd942413aaf24c264384d22655887b3b9bb54087aa193a70aff01c711ca6b" name="ImageMagick-c++" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="ab6decb641e7a8e4795c78afb9c44f46e949b506b5de342e2bcb3a77e4c0997c" name="ImageMagick-c++" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="5ae95c2a610508728922db9554b509db4babcf95d557e54df1f9c8fdacd5b4bf" name="ImageMagick-c++" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="523ebaf697ba18b9802f6162c9d397f206806f5eeb6d5c4b2319ea076412438a" name="ImageMagick-c++-devel" arch="x86_64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="ac92eeb72fbbc14b9febaeecaa4a5c1069b6dad7d98d570ba9082392d7faeae4" name="ImageMagick-c++-devel" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="2f38fffe7072446cd05035d29ed14dceb4e299c57b7ff48ba6690bb46e7dba1f" name="ImageMagick-c++-devel" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="a807956d7b0ca659cb84b74275db11669a0709993b751ee053d197ea96d01b07" name="ImageMagick-c++-devel" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="2d35ce41db2d943781cde3a7c2e01373fe49edcc9e6a1f8d9cb69e255d0a5466" name="ImageMagick-c++-devel" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="52016a410f20cb606b99655a6a8d69ead89700792520efa7f909a6ba8fc05348" name="ImageMagick-c++-devel" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="63752ccd66e0ab3f197c166de41320c1747092c283e3c42d7218cda5be8bbf2a" name="ImageMagick-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="dfdb3cc1e50bd4d73ce8c2b7567e949b084540d6736eb97e36244949d88353cb" name="ImageMagick-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="6f580332540eca347d00d334b8e8014185b1c3bd4d7020cb26518d49731c67fc" name="ImageMagick-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="8f18322fb6c769db6e84da6197333f9b1fb2bca4e4aba8263fe7bfe6215968d3" name="ImageMagick-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="151ba0cdf4b9f3ef89d1803166dcc8bda4894c8362918916abde06f8726aa5a2" name="ImageMagick-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="6a9243dd84b7ff041a9548c8a7d520586343af38854cb6f6f3231c4bde2ac2ca" name="ImageMagick-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="9cb43e8c00f625f4396ee8037fb2986502cfb426ee5edc9dd11fc5f9e593822e" name="ImageMagick-debugsource" arch="x86_64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="b3c5307fba377831c1be66453187f0cf86a369df1abbe4caddfd48e6852bcc92" name="ImageMagick-debugsource" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="5bea1c64e4dc2d35f5f8711062f808288e4fd1bfdf16420b838c596108a5e7fe" name="ImageMagick-debugsource" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="c60093aaff05f34b9021a658c5ab09e64df98591970bfaafa9a4d5d1841de38e" name="ImageMagick-debugsource" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="347e02a1ba1f520d24a59b5a6e449206fe07ee121ded3a45d3dce8d81c69c82e" name="ImageMagick-debugsource" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="e7a0f4fb1ee283c7cc22ddcd146bf8fbe67edbda7268ca54e0d1a5827287fdfe" name="ImageMagick-debugsource" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="64d2828fdc5bd449c79308a19827a7bdf829791a41ba163916ce30dccefaee9b" name="ImageMagick-devel" arch="x86_64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="17c1490e0d1f3f66f83ab5ec753f4592db5f7d9a4927bd3c049c8582bfd31fa7" name="ImageMagick-devel" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="b02958cf4fe2d9665877b9b6ac10088689cbf2e81b8c4126910963b4acdc309a" name="ImageMagick-devel" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="68d1cf948b50d83fb6777ccf36044ae1da67a364d596048768c7e9914d1788d9" name="ImageMagick-devel" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="877f74b1587adcd9a3656905a6f4c71f64a6ad4c22f202559809016cfb6f7cc8" name="ImageMagick-devel" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="167ab3190559ae366e74182db48c0c2ff5a2d2edd3c05f0683873699e56e0a1a" name="ImageMagick-devel" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="4407ce3dfc8f37b045a45410c8e00fc42d496de20b45d8b2484e284ffa62bea0" name="ImageMagick-help" arch="x86_64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="6f9aedb7778a20c5738a5922d076faf7d8a5e6e7c1f0dd000db3d67b275b7faf" name="ImageMagick-help" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="e7430eecf0911988792286d4c9d64e2bc9b0cee29f1097e7c6821e4df810504a" name="ImageMagick-help" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="d31f250571eb9911aedf2f411eee28a217bec90f2b3c2555b51e845dd78bb2f6" name="ImageMagick-help" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="e39f505792271f419f5f8f225bab542c25d46d806eb85b227fdd584c52131c55" name="ImageMagick-help" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="d93bb972ed92273e81f9cc8f699f60c15e647bca88bceeb72250cd7ac08bb63b" name="ImageMagick-help" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="08497ceb82d546c74221abc6d8b5b92b6a6f65a8816bf58242deb40409cc427c" name="ImageMagick-perl" arch="x86_64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="7c7b5331ec33329c72c1d191ac761d0327761530ca9c1470fff49bf5f6d0ba9e" name="ImageMagick-perl" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="140856fb11d818d705e98c1159ea535401c118b072c4cd05df771c661b855061" name="ImageMagick-perl" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="f3f771f1269caa01980b3d2c4d1707625f55d0636d57519010fbdfa988aca420" name="ImageMagick-perl" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="d7b83f147ad21bb4a124655bd2ff13b46f768abf0c96b599778433e3303e8621" name="ImageMagick-perl" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="a2d42d57415ab1f131f49203afc3285736da98a64681a7de6b200b54272a9826" name="ImageMagick-perl" arch="x86_64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="891139460e7c897bfb0bc1761f2d7d33de43a30c26f177c11641305dd114c13d" name="LibRaw" arch="x86_64">
  <version epoch="0" ver="0.20.2" rel="6.oe2203sp1"/>
  <changelog author="zhangjiapeng &lt;zhangjiapeng9@huawei.com&gt; - 0.20.2-4" date="1622721600">- fix use of uninitialized value</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.20.2-5" date="1645790400">- fix use of uninitialized value of makernotes.cpp and misc_parsers.cpp</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
</package>
<package pkgid="bd892bfd46f2456eb1893fe02e9170a0bb38a3efa4f633dce5c4258afb2fcf0f" name="LibRaw" arch="x86_64">
  <version epoch="0" ver="0.20.2" rel="7.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-7" date="1711454400">- Fix CVE-2021-32142</changelog>
</package>
<package pkgid="8121c99917c61f6b7176e375e3da4ee866efd1c158ee6fd6013a73a14b5e7edd" name="LibRaw-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.20.2" rel="6.oe2203sp1"/>
  <changelog author="zhangjiapeng &lt;zhangjiapeng9@huawei.com&gt; - 0.20.2-4" date="1622721600">- fix use of uninitialized value</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.20.2-5" date="1645790400">- fix use of uninitialized value of makernotes.cpp and misc_parsers.cpp</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
</package>
<package pkgid="0bdf1bce4c49bb4d8ec39c210d93c2f33b3db81dd341354f17e016193730e619" name="LibRaw-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.20.2" rel="7.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-7" date="1711454400">- Fix CVE-2021-32142</changelog>
</package>
<package pkgid="16e1691f6c64b41cbf37a964670b4202b308992f49b8b0081ce589443587f461" name="LibRaw-debugsource" arch="x86_64">
  <version epoch="0" ver="0.20.2" rel="6.oe2203sp1"/>
  <changelog author="zhangjiapeng &lt;zhangjiapeng9@huawei.com&gt; - 0.20.2-4" date="1622721600">- fix use of uninitialized value</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.20.2-5" date="1645790400">- fix use of uninitialized value of makernotes.cpp and misc_parsers.cpp</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
</package>
<package pkgid="c54206da567f1d9621f534e15fd04af2802966fdb6d24dd782128653f4d5411f" name="LibRaw-debugsource" arch="x86_64">
  <version epoch="0" ver="0.20.2" rel="7.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-7" date="1711454400">- Fix CVE-2021-32142</changelog>
</package>
<package pkgid="c19a7aafe3a3b0aca871e6b0eb40f7c48f9085b14227303d1c339ed10c502003" name="LibRaw-devel" arch="x86_64">
  <version epoch="0" ver="0.20.2" rel="6.oe2203sp1"/>
  <changelog author="zhangjiapeng &lt;zhangjiapeng9@huawei.com&gt; - 0.20.2-4" date="1622721600">- fix use of uninitialized value</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.20.2-5" date="1645790400">- fix use of uninitialized value of makernotes.cpp and misc_parsers.cpp</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
</package>
<package pkgid="c8b2126651887798e18944f7ca27557072d84fe93cb247740cdd3d94d5f79aff" name="LibRaw-devel" arch="x86_64">
  <version epoch="0" ver="0.20.2" rel="7.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-7" date="1711454400">- Fix CVE-2021-32142</changelog>
</package>
<package pkgid="5646dd813bf51132579b1b3594cc4aa3cb2a054165480d757007d04888b4640c" name="NetworkManager" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="9c6cfc5398f5f28a3175643f1738440a1eadb9efedc789d8911163c1574517eb" name="NetworkManager" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="f795d041089f046dde181dcdba15af3f834cc324aea9adcb35f6ca2823022236" name="NetworkManager" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="5eefea168f14d20149ace6db44caa6f2eb4b6c8187c85ed0da6c6621fec80708" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="476538224da26f7de158204f373a6ec7102142f7abe67facf3d983d80d8a182c" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="0111eb860c4daf5d99b9aa724dad4a0b742765762af1e7d3d41a812f2eacc504" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="be653b05a0c2db95f12a71aac31fd22733db06efe2cb7eaeb8f67836856e9d4c" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="a0b1cc8d182a5038ba715ce7d35fa3b0fa7d13f85807d6a6e71d020b56ed030f" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="a0c181b95651890b324368070bc3ac3246ff675fa93c78c0681fca9a48d4a09e" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="53f9bc22a8b7ea28794a2d28ae1589ee0fe12648856eaf2891d6a65ffb9ba7c6" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="552fdeb68ff455ee78fe3f875a354f85fa478157326c1de33f70314832bbc4bb" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="25a51256521668883f9cefe11200a5a9177a5c7cfd0efeb578d9fbfe690d96f3" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="53940bba6d7e995b69fdbcd377b49f8adf43f381c96c8f7760ed47cc11f12e1e" name="NetworkManager-debugsource" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="f5b064513a65bee6a7e773aac4a17d7c3fc4d84317aa634b9144fcd471829bf8" name="NetworkManager-debugsource" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="d5f4f9a8d312d86a5924a9f711a93cf5ba7d5e7e41191be6a071f6bc340df840" name="NetworkManager-debugsource" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="f1b3951ef4e496e20083301882ac06161061df5e24ddcd17e3c511ca879640c4" name="NetworkManager-help" arch="noarch">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="5fdb5f63ec26af2d55d913ec96d3d259a8804e83ee8235adad32e527736518b5" name="NetworkManager-help" arch="noarch">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="b6f522897baf20e02c2635986be1a125181e6065d3c5820e47b1be77e429cf22" name="NetworkManager-help" arch="noarch">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="184065ae334ffb9be39e89b230826f21f2d9ddfc413828bee25633d45625e8d6" name="NetworkManager-libnm" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="3a648671d406e19578d1e7975f892ecfadde6a391e9c81050a24c17a26a9d687" name="NetworkManager-libnm" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="670c2aaea89ab8c124854c50242a2403eac0712131644fbf5b46bc88ffe06364" name="NetworkManager-libnm" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="389761370900e7b7949bcd2977613b4090d0059a9f4be185d32adecb0939026c" name="NetworkManager-libnm-devel" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="5217a9d20a13da903771fb6339e37dfb1df9db8e9387881db7a34da171bc1898" name="NetworkManager-libnm-devel" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="5467e47734e935f3a2b6edf5e1bd2397f79910c36c00fdec4e049353a6aaa912" name="NetworkManager-libnm-devel" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="c9520c73845e77b0d08b20489348240b474340cdc911f0e68ab0d686b17f4e04" name="NetworkManager-ppp" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="bc6c0dabb495fa809d2c31ab7356778451e44e0e86c9d01d1c2676e0aa1af22a" name="NetworkManager-ppp" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="17788286b7fb0acf238cf5c609144c43270f7c2972def473156c2e788a981be3" name="NetworkManager-ppp" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="cc9f22965d0fbd3dfc0e0004137fe0d92ba9236ce93596080cfa1dd851851d94" name="NetworkManager-team" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="7f4c4302c7c84c7e00776c377a6bc4d9bb86b25c3482efda3d9ecc0224d03348" name="NetworkManager-team" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="88d1013fd753e560f8ca7d9e2f142b42f841e8ce4b3069b8c7ff4c161fa64752" name="NetworkManager-team" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="0a851ac5976510c6a01c1e43a4d2aa373cefebb412b08d744e508b7f0c8658f1" name="NetworkManager-wifi" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="85c446895d2d849f3cdc9d028d9a2028ccad24711a09edd93e00ecaf0097ebda" name="NetworkManager-wifi" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="4b0c9dee894c74d1b00347635263b8b83bd0ee605163892b32e1ac39391a89ae" name="NetworkManager-wifi" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="f971dff5eff9f49e7bd66f674c0780ff0a1958007314460160dc709b6cdad2da" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="be2b7dbea4222067ca9ae26682a1820312a3107ac4ba1c94a41f626f00b24f44" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="8d399a8247e67087a47dd2127d3562c01d2bcbe73d2da69842901a89456a22ff" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="4e3e746eea39ddafe93b3920e272140f439939521f5006473fb28f13a4a5af2b" name="OpenEXR" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
</package>
<package pkgid="70d49558233979c92e84229f8925f85edd6c115e11d98fc9ffba61e35d8fd685" name="OpenEXR" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.1.5-3" date="1713355200">- Fix CVE-2024-31047</changelog>
</package>
<package pkgid="8c9bd2d7806511d3127af335bef37b867729d3307db0e0c65bca2207fa9dd509" name="OpenEXR-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
</package>
<package pkgid="27089cd28501bc65ae5c59ba732a405e655893b188be46efcecb877079f3fd7a" name="OpenEXR-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.1.5-3" date="1713355200">- Fix CVE-2024-31047</changelog>
</package>
<package pkgid="963ff44ff766a6cb0e7f28e6f72272d89fcaa78061c96fdb37ecf1e1233964b6" name="OpenEXR-debugsource" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
</package>
<package pkgid="de1b7cde2ce5f49137be3429d3c9a20c6c033978dc0c9e7511b3677cac861bc3" name="OpenEXR-debugsource" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.1.5-3" date="1713355200">- Fix CVE-2024-31047</changelog>
</package>
<package pkgid="e3d373a1650c25ec9d6b499793b3d38258f273cbf53e4cfa1a5dd130dd78edae" name="OpenEXR-devel" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
</package>
<package pkgid="02788c3e6a5d892dcb954454b8682d84f30a3595550d0f41b85a299746ca81de" name="OpenEXR-devel" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.1.5-3" date="1713355200">- Fix CVE-2024-31047</changelog>
</package>
<package pkgid="2e948fa788d11cac3d47785aad360623f7162897d87c565405620f02027b9b25" name="OpenEXR-libs" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
</package>
<package pkgid="d4c882847f40c5fb94ad57c473422410b5e56631c2f00bf7a240d516dcb9cdce" name="OpenEXR-libs" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.1.5-3" date="1713355200">- Fix CVE-2024-31047</changelog>
</package>
<package pkgid="f39811989efc85a63b8e6ae65cc4b00ec08cc7474993207b2a05b4ef2a71aec0" name="SDL2" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 2.0.12-2" date="1641643200">- Fix build against wayland</changelog>
  <changelog author="yuanxin &lt;yuanxin24@h-partners.com&gt; - 2.0.12-3" date="1647345600">- Type:CVE
- ID:NA
- SUG:NA
- DESC:Fix CVE-2021-33657</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.12-4" date="1649678400">- Fix CVE-2020-14409 CVE-2020-14410</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2.0.12-5" date="1673352000">- fix CVE-2022-4743</changelog>
</package>
<package pkgid="1a7c41523a3ef61a69037b9d648c7fcfea6169427c9cedf479aa044f40217664" name="SDL2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 2.0.12-2" date="1641643200">- Fix build against wayland</changelog>
  <changelog author="yuanxin &lt;yuanxin24@h-partners.com&gt; - 2.0.12-3" date="1647345600">- Type:CVE
- ID:NA
- SUG:NA
- DESC:Fix CVE-2021-33657</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.12-4" date="1649678400">- Fix CVE-2020-14409 CVE-2020-14410</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2.0.12-5" date="1673352000">- fix CVE-2022-4743</changelog>
</package>
<package pkgid="954e3888bffe85e34d8ac56b52471d9a3ab1212089d4da66a5160eb0303a50a6" name="SDL2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 2.0.12-2" date="1641643200">- Fix build against wayland</changelog>
  <changelog author="yuanxin &lt;yuanxin24@h-partners.com&gt; - 2.0.12-3" date="1647345600">- Type:CVE
- ID:NA
- SUG:NA
- DESC:Fix CVE-2021-33657</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.12-4" date="1649678400">- Fix CVE-2020-14409 CVE-2020-14410</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2.0.12-5" date="1673352000">- fix CVE-2022-4743</changelog>
</package>
<package pkgid="b68278c0f979c6f965d1aaace7bd2ea591cbbefe9975d6d5d5da2d1011e488f4" name="SDL2-devel" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 2.0.12-2" date="1641643200">- Fix build against wayland</changelog>
  <changelog author="yuanxin &lt;yuanxin24@h-partners.com&gt; - 2.0.12-3" date="1647345600">- Type:CVE
- ID:NA
- SUG:NA
- DESC:Fix CVE-2021-33657</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.12-4" date="1649678400">- Fix CVE-2020-14409 CVE-2020-14410</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2.0.12-5" date="1673352000">- fix CVE-2022-4743</changelog>
</package>
<package pkgid="d3b11d3051cb4d076ab9e67e87badf855fdf81f805fe305ee25f9735ffc7184d" name="SDL2-static" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 2.0.12-2" date="1641643200">- Fix build against wayland</changelog>
  <changelog author="yuanxin &lt;yuanxin24@h-partners.com&gt; - 2.0.12-3" date="1647345600">- Type:CVE
- ID:NA
- SUG:NA
- DESC:Fix CVE-2021-33657</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.12-4" date="1649678400">- Fix CVE-2020-14409 CVE-2020-14410</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2.0.12-5" date="1673352000">- fix CVE-2022-4743</changelog>
</package>
<package pkgid="b94dbb23ed10cf9f1e0e44ea207f18240045bca275a59581e58dddf6a6cf602b" name="abseil-cpp" arch="x86_64">
  <version epoch="0" ver="20220623.1" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-1" date="1667390400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 20220623.1</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 20220623.1-2" date="1668168000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 20220623.1-3" date="1668427200">- add loongarch support for abseil-cpp</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-5" date="1713268800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Add missing include for std::unique_ptr</changelog>
</package>
<package pkgid="fea318e67995c727ffefec33b7685bf663270959f74aab85a335c3dc46b48e52" name="abseil-cpp-debuginfo" arch="x86_64">
  <version epoch="0" ver="20220623.1" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-1" date="1667390400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 20220623.1</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 20220623.1-2" date="1668168000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 20220623.1-3" date="1668427200">- add loongarch support for abseil-cpp</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-5" date="1713268800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Add missing include for std::unique_ptr</changelog>
</package>
<package pkgid="40eec1d5851043d52081189bfd0f4b019e322f555c5486576fbc3a96bee29ba2" name="abseil-cpp-debugsource" arch="x86_64">
  <version epoch="0" ver="20220623.1" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-1" date="1667390400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 20220623.1</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 20220623.1-2" date="1668168000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 20220623.1-3" date="1668427200">- add loongarch support for abseil-cpp</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-5" date="1713268800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Add missing include for std::unique_ptr</changelog>
</package>
<package pkgid="97fa494d5ffb96530afe12fee44e67c2e42adf2a17c42c1a47f18c0c117430bb" name="abseil-cpp-devel" arch="x86_64">
  <version epoch="0" ver="20220623.1" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-1" date="1667390400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 20220623.1</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 20220623.1-2" date="1668168000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 20220623.1-3" date="1668427200">- add loongarch support for abseil-cpp</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-5" date="1713268800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Add missing include for std::unique_ptr</changelog>
</package>
<package pkgid="e30cbd9606df26ab06e99748ede77ee340015e51c0d7d932d9dd20fcb0634507" name="adwaita-qt" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="7.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.1.0-7" date="1688731200">- Modify changelog release version</changelog>
</package>
<package pkgid="3497e26a58abde984b5737c46d539862e13585e716d915335cea1a3e2fd66e12" name="adwaita-qt-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="7.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.1.0-7" date="1688731200">- Modify changelog release version</changelog>
</package>
<package pkgid="58d6d6e7f28824f8a7488b0bd88454faa697f45dc6d9c123bbdae1d26954f6e7" name="adwaita-qt-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="7.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.1.0-7" date="1688731200">- Modify changelog release version</changelog>
</package>
<package pkgid="8067cb379d205c817ebe78a7e5e56c6b1a879d353284aed232b0d404dcb84c11" name="adwaita-qt-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="7.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.1.0-7" date="1688731200">- Modify changelog release version</changelog>
</package>
<package pkgid="9a9c8add01c8dd7dcfbbef53d21ef694330826b73d97116cf203f31f0d0e7568" name="amanda" arch="x86_64">
  <version epoch="0" ver="3.5.1" rel="23.oe2203sp1"/>
  <changelog author="Haiwei Li &lt;lihaiwei8@huawei.com&gt; - 3.5.1-19" date="1627646400">- Fix multiple definition tu_debugging_enabled</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
</package>
<package pkgid="0229fb3b7ac86ed491980dbbfbd2f7a8d11baa12e8ed263fb6286f856ffefda6" name="amanda" arch="x86_64">
  <version epoch="0" ver="3.5.4" rel="1.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.4-1" date="1691496000">- Update to version 3.5.4 for fix CVE-2023-30577</changelog>
</package>
<package pkgid="b64176fa7c94cb50021d309f61f3b8320f842b3d4dda30add8dc746e91405071" name="amanda-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.1" rel="23.oe2203sp1"/>
  <changelog author="Haiwei Li &lt;lihaiwei8@huawei.com&gt; - 3.5.1-19" date="1627646400">- Fix multiple definition tu_debugging_enabled</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
</package>
<package pkgid="43fdf236e706336b13f1d025927badab3f54e50ff68b8b86077862777665dd51" name="amanda-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.4" rel="1.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.4-1" date="1691496000">- Update to version 3.5.4 for fix CVE-2023-30577</changelog>
</package>
<package pkgid="495d1c2182bab8fa8d10037c9c717934e604a033b6171ec89832bb8a6494d206" name="amanda-debugsource" arch="x86_64">
  <version epoch="0" ver="3.5.1" rel="23.oe2203sp1"/>
  <changelog author="Haiwei Li &lt;lihaiwei8@huawei.com&gt; - 3.5.1-19" date="1627646400">- Fix multiple definition tu_debugging_enabled</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
</package>
<package pkgid="8edee9285fea5dd09a55e66d831ab2b76a9a9e5ffcf6bf4549d8407950f26f0a" name="amanda-debugsource" arch="x86_64">
  <version epoch="0" ver="3.5.4" rel="1.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.4-1" date="1691496000">- Update to version 3.5.4 for fix CVE-2023-30577</changelog>
</package>
<package pkgid="388a55107796cab342f86e065a857174fcc262b4a46986c5f76365beb52e8bf4" name="amanda-help" arch="noarch">
  <version epoch="0" ver="3.5.1" rel="23.oe2203sp1"/>
  <changelog author="Haiwei Li &lt;lihaiwei8@huawei.com&gt; - 3.5.1-19" date="1627646400">- Fix multiple definition tu_debugging_enabled</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
</package>
<package pkgid="8c531c79e27ca6e23c86e96287ca665f039f9fef2089cbb87b47dcec88a3cf50" name="amanda-help" arch="noarch">
  <version epoch="0" ver="3.5.4" rel="1.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.4-1" date="1691496000">- Update to version 3.5.4 for fix CVE-2023-30577</changelog>
</package>
<package pkgid="c70834dcca06235e245aa4ab4b0941e5427d766858a7c07bd22ab3e4a6dfde1a" name="anaconda" arch="x86_64">
  <version epoch="0" ver="36.16.5" rel="13.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-4" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:open disk encryption on openEuler</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
</package>
<package pkgid="2f27e21bc42537377c7d170efc0d58e184b4f97b3dee4d97f0d8a06f6ec334ef" name="anaconda" arch="x86_64">
  <version epoch="0" ver="36.16.5" rel="14.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-14" date="1677240000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport password tooltip text adapt language
        close disk encryption</changelog>
</package>
<package pkgid="c71daa609e419b867747fd933ec2e30651214cbc336148478d4e85c135f302f3" name="anaconda-core" arch="x86_64">
  <version epoch="0" ver="36.16.5" rel="13.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-4" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:open disk encryption on openEuler</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
</package>
<package pkgid="0d89b7234c1e0fc173763b16f0b8d65ed3c18a9e63e937a9c17a740c96129db7" name="anaconda-core" arch="x86_64">
  <version epoch="0" ver="36.16.5" rel="14.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-14" date="1677240000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport password tooltip text adapt language
        close disk encryption</changelog>
</package>
<package pkgid="48cc3bea0323b75b356db78f05e88f8b9183e5bf3b60caa945a6906e92231873" name="anaconda-debuginfo" arch="x86_64">
  <version epoch="0" ver="36.16.5" rel="13.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-4" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:open disk encryption on openEuler</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
</package>
<package pkgid="1489f2aaed9114cb082796e53af2e4c7c64959adf6690832d566d51d1ffb1e89" name="anaconda-debuginfo" arch="x86_64">
  <version epoch="0" ver="36.16.5" rel="14.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-14" date="1677240000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport password tooltip text adapt language
        close disk encryption</changelog>
</package>
<package pkgid="1549989b4c5b42bf790531f0f64ebb2208b6a90437a222bd1d77d52c9f7360df" name="anaconda-debugsource" arch="x86_64">
  <version epoch="0" ver="36.16.5" rel="13.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-4" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:open disk encryption on openEuler</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
</package>
<package pkgid="537170acaa167182c2ccfe5247aa9d5bb886f4ba6f5f9b55fb85e655084c30eb" name="anaconda-debugsource" arch="x86_64">
  <version epoch="0" ver="36.16.5" rel="14.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-14" date="1677240000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport password tooltip text adapt language
        close disk encryption</changelog>
</package>
<package pkgid="79af5b9e20574931b3e7d63d7aca1b5100d58528ffd0bca659cf6d8f63004743" name="anaconda-devel" arch="x86_64">
  <version epoch="0" ver="36.16.5" rel="13.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-4" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:open disk encryption on openEuler</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
</package>
<package pkgid="3c2fc6e8d27fd3a4c3cfd6dcc431063fe6fce05438c78e04788fdfc9f4db347f" name="anaconda-devel" arch="x86_64">
  <version epoch="0" ver="36.16.5" rel="14.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-14" date="1677240000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport password tooltip text adapt language
        close disk encryption</changelog>
</package>
<package pkgid="da67fe59b42856f90eca766f006d998193c240b2761f95a1cee96dc76fb54654" name="anaconda-dracut" arch="x86_64">
  <version epoch="0" ver="36.16.5" rel="13.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-4" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:open disk encryption on openEuler</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
</package>
<package pkgid="0fb25069e1ef5716470330791dcff26e4d2d11e8250ed075b81b4d4b00d8edf7" name="anaconda-dracut" arch="x86_64">
  <version epoch="0" ver="36.16.5" rel="14.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-14" date="1677240000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport password tooltip text adapt language
        close disk encryption</changelog>
</package>
<package pkgid="97fec0a03f7b211d013df31af30250e66aed721e3afd337d4bc0f5cf11810a49" name="anaconda-tui" arch="x86_64">
  <version epoch="0" ver="36.16.5" rel="13.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-4" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:open disk encryption on openEuler</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
</package>
<package pkgid="0b4b1ace1eae0cde0755930ba9e2ffb3fed5bed4a8650ff430409c5d136c9b38" name="anaconda-tui" arch="x86_64">
  <version epoch="0" ver="36.16.5" rel="14.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-14" date="1677240000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport password tooltip text adapt language
        close disk encryption</changelog>
</package>
<package pkgid="bbfd5a2b82b097b338367abbd0ddb0969c6b2f7cf947eb2f9e3887e43bedcc27" name="ansible" arch="noarch">
  <version epoch="0" ver="2.9.27" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 2.9.27-1" date="1646136000">- Hostname module support openEuler</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.9.27-2" date="1647604800">- Remove require python-keyczar and modify require crypto to cryptography</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.9.27-3" date="1681905600">- Remove with_python3 macros and python3-nose buildRequire</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-4" date="1707134400">- Fix CVE-2024-0690</changelog>
</package>
<package pkgid="f3a2b9808120e3be5362d9137bf8d89df8bbe40831f1650ea7a00a004ceea71a" name="ansible-help" arch="noarch">
  <version epoch="0" ver="2.9.27" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 2.9.27-1" date="1646136000">- Hostname module support openEuler</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.9.27-2" date="1647604800">- Remove require python-keyczar and modify require crypto to cryptography</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.9.27-3" date="1681905600">- Remove with_python3 macros and python3-nose buildRequire</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-4" date="1707134400">- Fix CVE-2024-0690</changelog>
</package>
<package pkgid="44c10a5b9d76dab95fb72b5707edc0c54077fcd2fe48870b8e2c727792ef4d48" name="apache-commons-fileupload" arch="noarch">
  <version epoch="0" ver="1.4" rel="2.oe2203sp1"/>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1.4-2" date="1678104000">- fix CVE-2023-24998</changelog>
</package>
<package pkgid="151d030e3d4d38f9e6c745bfc233f33e71eea2ec81d24ffaaa0e57e73fac1770" name="apache-commons-fileupload-help" arch="noarch">
  <version epoch="0" ver="1.4" rel="2.oe2203sp1"/>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1.4-2" date="1678104000">- fix CVE-2023-24998</changelog>
</package>
<package pkgid="970490e5534f79652aa52c6b11d92de1571ff1e1d5fd1a472ba8f891b0b012c2" name="apache-commons-net" arch="noarch">
  <version epoch="0" ver="3.6" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.6-6" date="1685966400">- Remove TestConnectTimeout for ftp</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.6-7" date="1700740800">- Fix CVE-2021-37533</changelog>
</package>
<package pkgid="e6ad9df102883784969592026c60030b86fda75f867f9ffc3d5e015d7935c653" name="apache-commons-net-help" arch="noarch">
  <version epoch="0" ver="3.6" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.6-6" date="1685966400">- Remove TestConnectTimeout for ftp</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.6-7" date="1700740800">- Fix CVE-2021-37533</changelog>
</package>
<package pkgid="52a11700920358871d867cac07302db65d43a1a3fa9ebc387beb2485694ea01d" name="apache-mime4j" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 0.8.3-1" date="1655208000">- Upgrade to version 0.8.3</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.8.3-2" date="1709208000">- Fix CVE-2024-21742</changelog>
</package>
<package pkgid="e3a631352a99bfe03138e760a8db4abe72c7dd6611fe11c86986142494ca1ec6" name="apache-mime4j-javadoc" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 0.8.3-1" date="1655208000">- Upgrade to version 0.8.3</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.8.3-2" date="1709208000">- Fix CVE-2024-21742</changelog>
</package>
<package pkgid="43d5ba4460f23a394276dd33a872e155c40610d4e9ed675b90ebda83f967a1eb" name="apache-sshd" arch="noarch">
  <version epoch="1" ver="2.9.2" rel="2.oe2203sp1"/>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 1:2.9.2-1" date="1669032000">- Fix CVE-2022-45047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.9.2-2" date="1704974400">- Fix CVE-2023-35887</changelog>
</package>
<package pkgid="842cf5cb8199d7de9903cd980dcd0c5670dfe0d97ee34ddd90dc754217446e79" name="apache-sshd" arch="noarch">
  <version epoch="1" ver="2.9.2" rel="3.oe2203sp1"/>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 1:2.9.2-1" date="1669032000">- Fix CVE-2022-45047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.9.2-2" date="1704974400">- Fix CVE-2023-35887</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:2.9.2-3" date="1705924800">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="587ea96b2428fc427abee2216f28ba274b2b67fc8e410f601e2d06fb7fbd575c" name="apache-sshd-javadoc" arch="noarch">
  <version epoch="1" ver="2.9.2" rel="2.oe2203sp1"/>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 1:2.9.2-1" date="1669032000">- Fix CVE-2022-45047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.9.2-2" date="1704974400">- Fix CVE-2023-35887</changelog>
</package>
<package pkgid="4f2bff1721d24c2658dea4326abdb65c53e7f57e110ae80c516fa330f085ff65" name="apache-sshd-javadoc" arch="noarch">
  <version epoch="1" ver="2.9.2" rel="3.oe2203sp1"/>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 1:2.9.2-1" date="1669032000">- Fix CVE-2022-45047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.9.2-2" date="1704974400">- Fix CVE-2023-35887</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:2.9.2-3" date="1705924800">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="1183cc0e1be427e24eb3a56a9d1fe02d797d33ecb96fbd6e242182f02bd52a8c" name="apr" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="6.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-2" date="1616155200">- Type: CVE
- ID: CVE-2017-12613
- SUG: NA
- DESC:Fix CVE-2017-12613</changelog>
  <changelog author="shenyangyang&lt;shenyangyang4@huawei.com&gt; - 1.7.0-3" date="1617105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
       to /usr/lib/xxxx</changelog>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-4" date="1639742400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix the compilation failure when autoconf-2.71 is used</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 1.7.0-5" date="1666612800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use the macro make_build instead of make in build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.7.0-6" date="1676289600">- Type:CVE
- ID:CVE-2022-24963
- SUG:NA
- DESC:Fix CVE-2022-24963</changelog>
</package>
<package pkgid="7f07de2239d3bd9221aace6517438220efc2b6988df37f9680359ff0cc1dfb39" name="apr-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="6.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-2" date="1616155200">- Type: CVE
- ID: CVE-2017-12613
- SUG: NA
- DESC:Fix CVE-2017-12613</changelog>
  <changelog author="shenyangyang&lt;shenyangyang4@huawei.com&gt; - 1.7.0-3" date="1617105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
       to /usr/lib/xxxx</changelog>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-4" date="1639742400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix the compilation failure when autoconf-2.71 is used</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 1.7.0-5" date="1666612800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use the macro make_build instead of make in build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.7.0-6" date="1676289600">- Type:CVE
- ID:CVE-2022-24963
- SUG:NA
- DESC:Fix CVE-2022-24963</changelog>
</package>
<package pkgid="530ae0eb9327a4fe920c9640d26bdbe0ee81b655c6279261530173547ac6f562" name="apr-debugsource" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="6.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-2" date="1616155200">- Type: CVE
- ID: CVE-2017-12613
- SUG: NA
- DESC:Fix CVE-2017-12613</changelog>
  <changelog author="shenyangyang&lt;shenyangyang4@huawei.com&gt; - 1.7.0-3" date="1617105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
       to /usr/lib/xxxx</changelog>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-4" date="1639742400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix the compilation failure when autoconf-2.71 is used</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 1.7.0-5" date="1666612800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use the macro make_build instead of make in build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.7.0-6" date="1676289600">- Type:CVE
- ID:CVE-2022-24963
- SUG:NA
- DESC:Fix CVE-2022-24963</changelog>
</package>
<package pkgid="2a44c806d4e8958e3d4fed26a07c6959ecc11e78d69ef7fb071dde5d4605bf30" name="apr-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="6.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-2" date="1616155200">- Type: CVE
- ID: CVE-2017-12613
- SUG: NA
- DESC:Fix CVE-2017-12613</changelog>
  <changelog author="shenyangyang&lt;shenyangyang4@huawei.com&gt; - 1.7.0-3" date="1617105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
       to /usr/lib/xxxx</changelog>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-4" date="1639742400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix the compilation failure when autoconf-2.71 is used</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 1.7.0-5" date="1666612800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use the macro make_build instead of make in build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.7.0-6" date="1676289600">- Type:CVE
- ID:CVE-2022-24963
- SUG:NA
- DESC:Fix CVE-2022-24963</changelog>
</package>
<package pkgid="3f048459bc4dac47aaae1ef03033a1195359785b5f3c8e0142140c6d388d9e92" name="apr-help" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="6.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-2" date="1616155200">- Type: CVE
- ID: CVE-2017-12613
- SUG: NA
- DESC:Fix CVE-2017-12613</changelog>
  <changelog author="shenyangyang&lt;shenyangyang4@huawei.com&gt; - 1.7.0-3" date="1617105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
       to /usr/lib/xxxx</changelog>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-4" date="1639742400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix the compilation failure when autoconf-2.71 is used</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 1.7.0-5" date="1666612800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use the macro make_build instead of make in build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.7.0-6" date="1676289600">- Type:CVE
- ID:CVE-2022-24963
- SUG:NA
- DESC:Fix CVE-2022-24963</changelog>
</package>
<package pkgid="e5bdd9938a252ebec686ee0e3a5a0b75e57a8d3aa8eb3b4442d1ed3ff18a158b" name="apr-util" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1.6.1-12" date="1624104000">- BuildRequires: replace libdb with gdbm
- Add requires gdbm-devel</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.6.1-13" date="1659009600">- add sw64 patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.6.1-14" date="1676376000">- Fix CVE-2022-25147</changelog>
</package>
<package pkgid="45376f618de7cbeb5fc23bfaae7ca8c2fff4c5a4194c9822ba0b7ada58b5df17" name="apr-util-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1.6.1-12" date="1624104000">- BuildRequires: replace libdb with gdbm
- Add requires gdbm-devel</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.6.1-13" date="1659009600">- add sw64 patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.6.1-14" date="1676376000">- Fix CVE-2022-25147</changelog>
</package>
<package pkgid="65b6860cf2d353bf8bf271b9ec4d13937ad81e99a4384d84da778871fde8c500" name="apr-util-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1.6.1-12" date="1624104000">- BuildRequires: replace libdb with gdbm
- Add requires gdbm-devel</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.6.1-13" date="1659009600">- add sw64 patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.6.1-14" date="1676376000">- Fix CVE-2022-25147</changelog>
</package>
<package pkgid="5ce08eaba22824261c17aa63123801f98186d778602235f580c088200f89ef7f" name="apr-util-devel" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1.6.1-12" date="1624104000">- BuildRequires: replace libdb with gdbm
- Add requires gdbm-devel</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.6.1-13" date="1659009600">- add sw64 patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.6.1-14" date="1676376000">- Fix CVE-2022-25147</changelog>
</package>
<package pkgid="198603e1655d3bd32c7b10bbaf73420816565017e5dd1190fc0948c3ff8938e7" name="apr-util-odbc" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1.6.1-12" date="1624104000">- BuildRequires: replace libdb with gdbm
- Add requires gdbm-devel</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.6.1-13" date="1659009600">- add sw64 patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.6.1-14" date="1676376000">- Fix CVE-2022-25147</changelog>
</package>
<package pkgid="b84429b223b020490e17a74e718f2bd606c8af764deab5aeec4625cadd4704e5" name="apr-util-pgsql" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1.6.1-12" date="1624104000">- BuildRequires: replace libdb with gdbm
- Add requires gdbm-devel</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.6.1-13" date="1659009600">- add sw64 patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.6.1-14" date="1676376000">- Fix CVE-2022-25147</changelog>
</package>
<package pkgid="a6054e1fc1621f08de02f42fe6592a3ca13ea9ae4dd068123b8790f03614285f" name="aspell" arch="x86_64">
  <version epoch="12" ver="0.60.6.1" rel="30.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 12:0.60.6.1-29" date="1659009600">- add sw64 patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 12:0.60.6.1-30" date="1710763200">- Fix CVE-2019-25051</changelog>
</package>
<package pkgid="974b583bf3acc5d365e29d52709f4e485090da3d806b39355b7364bae180bed7" name="aspell-debuginfo" arch="x86_64">
  <version epoch="12" ver="0.60.6.1" rel="30.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 12:0.60.6.1-29" date="1659009600">- add sw64 patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 12:0.60.6.1-30" date="1710763200">- Fix CVE-2019-25051</changelog>
</package>
<package pkgid="4b2b4ae93c4de2c8fbef1e3ebf35628c2202be129647dc66f32f37fa0df7f510" name="aspell-debugsource" arch="x86_64">
  <version epoch="12" ver="0.60.6.1" rel="30.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 12:0.60.6.1-29" date="1659009600">- add sw64 patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 12:0.60.6.1-30" date="1710763200">- Fix CVE-2019-25051</changelog>
</package>
<package pkgid="4d6d0519d54f61b9f63a9503a81522bef5957bed38aeedddeaa9bfbd9f0208f5" name="aspell-devel" arch="x86_64">
  <version epoch="12" ver="0.60.6.1" rel="30.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 12:0.60.6.1-29" date="1659009600">- add sw64 patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 12:0.60.6.1-30" date="1710763200">- Fix CVE-2019-25051</changelog>
</package>
<package pkgid="cd7e8b385f99f380c7485913ea57795b6ea35f523210eb5a9213d57e081f887d" name="aspell-help" arch="x86_64">
  <version epoch="12" ver="0.60.6.1" rel="30.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 12:0.60.6.1-29" date="1659009600">- add sw64 patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 12:0.60.6.1-30" date="1710763200">- Fix CVE-2019-25051</changelog>
</package>
<package pkgid="632437977543de55955f8ae8c407befe0ac1e122a974608a0df633d30d8d66c3" name="at" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="4.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 3.2.2-1" date="1639224000">- Type:update
- ID:NA
- SUG:NA
- DESC:update version to 3.2.2</changelog>
  <changelog author="yanglongkang&lt;yanglongkang@h-partners.com&gt; - 3.2.2-2" date="1666440000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Adding Patching Operations
       provides relibility and self-heading capabilities for service</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.2.2-3" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify Source0</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.2.2-4" date="1686312000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:provides reliability and self-healing capabilities for service</changelog>
</package>
<package pkgid="53be3fcacc5fc0e83c36fa6f5f5042d764f27e5d88f48c2c962cf781c0f15f6d" name="at-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="4.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 3.2.2-1" date="1639224000">- Type:update
- ID:NA
- SUG:NA
- DESC:update version to 3.2.2</changelog>
  <changelog author="yanglongkang&lt;yanglongkang@h-partners.com&gt; - 3.2.2-2" date="1666440000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Adding Patching Operations
       provides relibility and self-heading capabilities for service</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.2.2-3" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify Source0</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.2.2-4" date="1686312000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:provides reliability and self-healing capabilities for service</changelog>
</package>
<package pkgid="98789c0943cd35b2d2377c71b0d84b9532c455f0e4e4f6006d205cddaec820a3" name="at-debugsource" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="4.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 3.2.2-1" date="1639224000">- Type:update
- ID:NA
- SUG:NA
- DESC:update version to 3.2.2</changelog>
  <changelog author="yanglongkang&lt;yanglongkang@h-partners.com&gt; - 3.2.2-2" date="1666440000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Adding Patching Operations
       provides relibility and self-heading capabilities for service</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.2.2-3" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify Source0</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.2.2-4" date="1686312000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:provides reliability and self-healing capabilities for service</changelog>
</package>
<package pkgid="a2c817b41f6836df5dafe79225df33ee861b59c681b64e389f269edf9aabf417" name="at-help" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="4.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 3.2.2-1" date="1639224000">- Type:update
- ID:NA
- SUG:NA
- DESC:update version to 3.2.2</changelog>
  <changelog author="yanglongkang&lt;yanglongkang@h-partners.com&gt; - 3.2.2-2" date="1666440000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Adding Patching Operations
       provides relibility and self-heading capabilities for service</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.2.2-3" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify Source0</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.2.2-4" date="1686312000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:provides reliability and self-healing capabilities for service</changelog>
</package>
<package pkgid="8705e154c312058e6cc0256ced8f8413208539a58ca21b4b272b3dc5c35e3092" name="atune" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="12.oe2203sp1"/>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-3" date="1646308800">- fix start failed of atuned service</changelog>
  <changelog author="Bin Hu &lt;hubin73@huawei.com&gt; - 1.0.0-4" date="1646395200">- change Makefile A-Tune version to 1.0.0</changelog>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
</package>
<package pkgid="92293e205e41091a02e6e197847bdce6c11b667c2fd0803e99f909b8ad419945" name="atune" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-13" date="1699444800">- define-fix-privilege-escalation</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-14" date="1699444801">- fix-collection-train-file-overwriting-through-soft-links</changelog>
</package>
<package pkgid="03366c1b04d560f356b71677dceac5708723d0f44c5ca0303c703936b4addeb1" name="atune-client" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="12.oe2203sp1"/>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-3" date="1646308800">- fix start failed of atuned service</changelog>
  <changelog author="Bin Hu &lt;hubin73@huawei.com&gt; - 1.0.0-4" date="1646395200">- change Makefile A-Tune version to 1.0.0</changelog>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
</package>
<package pkgid="1ce930e699e03b28ac7ce17d237df0026606a8214be09c46ea9d9de51ffb0f9c" name="atune-client" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-13" date="1699444800">- define-fix-privilege-escalation</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-14" date="1699444801">- fix-collection-train-file-overwriting-through-soft-links</changelog>
</package>
<package pkgid="45bad0a937546a46b48033ca3bc348a58f7c639c80eb98b071eb0f05c407c53d" name="atune-collector" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="3.oe2203sp1"/>
  <changelog author="hanxinke &lt;hanxinke@huawei.com&gt; - 1.1.0-1" date="1636632000">- upgrade to v1.1.0</changelog>
  <changelog author="zhangjian &lt;zhang_jian7@hoperun.com&gt; - 1.1.0-2" date="1678363200">- fix bug: list index out of range in virtualbox</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-3" date="1690891200">- feature: enable application config</changelog>
</package>
<package pkgid="06ef00bda908abe860b3a76af30a656defc36ddef9aca970ae8aa23efc2c6875" name="atune-collector" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="4.oe2203sp1"/>
  <changelog author="hanxinke &lt;hanxinke@huawei.com&gt; - 1.1.0-1" date="1636632000">- upgrade to v1.1.0</changelog>
  <changelog author="zhangjian &lt;zhang_jian7@hoperun.com&gt; - 1.1.0-2" date="1678363200">- fix bug: list index out of range in virtualbox</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-3" date="1690891200">- feature: enable application config</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-4" date="1692187200">- atune-collector: add backup for apps</changelog>
</package>
<package pkgid="a1ddaf9044df3674d73b95adf5255fb661bfd9568cbbfe0101be6884ca430228" name="atune-collector" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="5.oe2203sp1"/>
  <changelog author="hanxinke &lt;hanxinke@huawei.com&gt; - 1.1.0-1" date="1636632000">- upgrade to v1.1.0</changelog>
  <changelog author="zhangjian &lt;zhang_jian7@hoperun.com&gt; - 1.1.0-2" date="1678363200">- fix bug: list index out of range in virtualbox</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-3" date="1690891200">- feature: enable application config</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-4" date="1692187200">- atune-collector: add backup for apps</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-5" date="1692705600">- feature: add [network] to CPI</changelog>
</package>
<package pkgid="4dec5fa8c9efaed638aec0d06a568268489023dced27763876ac7c94edd8baf8" name="atune-collector" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="6.oe2203sp1"/>
  <changelog author="zhangjian &lt;zhang_jian7@hoperun.com&gt; - 1.1.0-2" date="1678363200">- fix bug: list index out of range in virtualbox</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-3" date="1690891200">- feature: enable application config</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-4" date="1692187200">- atune-collector: add backup for apps</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-5" date="1692705600">- feature: add [network] to CPI</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-6" date="1701259200">- feature: add rfs and rps/xps=multi to [network]</changelog>
</package>
<package pkgid="581a74d9ef3d2b4a46bb299162abb47bca6613b5ad5fae2043ad4743f6e95971" name="atune-collector" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="8.oe2203sp1"/>
  <changelog author="zhangjian &lt;zhang_jian7@hoperun.com&gt; - 1.1.0-2" date="1678363200">- fix bug: list index out of range in virtualbox</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-3" date="1690891200">- feature: enable application config</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-4" date="1692187200">- atune-collector: add backup for apps</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-5" date="1692705600">- feature: add [network] to CPI</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-6" date="1701259200">- feature: add rfs and rps/xps=multi to [network]</changelog>
  <changelog author="weiyaping &lt;weiyaping@xfusion.com&gt; - 1.1.0-7" date="1702641600">- fix bug: ProcSched.report: list index out of range</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.1.0-8" date="1710244800">- fix CVE-2024-24897</changelog>
</package>
<package pkgid="96942ec8f7f5a3f618696600f3ab76738d9d0e975100fe99e0cb7357e038dc29" name="atune-db" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="12.oe2203sp1"/>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-3" date="1646308800">- fix start failed of atuned service</changelog>
  <changelog author="Bin Hu &lt;hubin73@huawei.com&gt; - 1.0.0-4" date="1646395200">- change Makefile A-Tune version to 1.0.0</changelog>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
</package>
<package pkgid="8b71c368dd9d2236cbcc2a9e64c5e5758070dd9a2804fdc424b81a8ee2c1dfae" name="atune-db" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-13" date="1699444800">- define-fix-privilege-escalation</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-14" date="1699444801">- fix-collection-train-file-overwriting-through-soft-links</changelog>
</package>
<package pkgid="f93dc80b54a48ee4d7970e52d18887f69418a9fd25a2678efd657929b77ad407" name="atune-engine" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="12.oe2203sp1"/>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-3" date="1646308800">- fix start failed of atuned service</changelog>
  <changelog author="Bin Hu &lt;hubin73@huawei.com&gt; - 1.0.0-4" date="1646395200">- change Makefile A-Tune version to 1.0.0</changelog>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
</package>
<package pkgid="e76288a3115ed4064173d8b786bd7ce81a47fc3bf06e7b77288c59f383a31028" name="atune-engine" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-13" date="1699444800">- define-fix-privilege-escalation</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-14" date="1699444801">- fix-collection-train-file-overwriting-through-soft-links</changelog>
</package>
<package pkgid="4a12106fcdc64107f5825eddf5aa35e2c63d0ecc4a395d99bce730a24f7a5e8b" name="authselect" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 1.2.2-3" date="1626696000">- Delete unnecessary gdb from BuildRequires</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-1" date="1638273600">- update to 1.2.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-2" date="1642161600">- revert "remove authselect compat package"</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-3" date="1647864000">- fix change date for version 1.2.4-2 in changelog</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-4" date="1651233600">- delete duplicate file README.md from authselect-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-5" date="1652616000">- provide default directory /etc/authselect</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.2.4-6" date="1660564800">- cli: fix memory handling with new popt library</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-7" date="1685448000">- fix the failure of login by root</changelog>
</package>
<package pkgid="d750327603bc26f4a8565f1a618b6d8f75ccf5f1d5b123c8d38976e4b28e4e10" name="authselect-compat" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 1.2.2-3" date="1626696000">- Delete unnecessary gdb from BuildRequires</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-1" date="1638273600">- update to 1.2.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-2" date="1642161600">- revert "remove authselect compat package"</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-3" date="1647864000">- fix change date for version 1.2.4-2 in changelog</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-4" date="1651233600">- delete duplicate file README.md from authselect-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-5" date="1652616000">- provide default directory /etc/authselect</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.2.4-6" date="1660564800">- cli: fix memory handling with new popt library</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-7" date="1685448000">- fix the failure of login by root</changelog>
</package>
<package pkgid="b34cd49a0abce9ac8d7336fd292f80d8bffec76865564b7b7e4ddc4de9a4c55a" name="authselect-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 1.2.2-3" date="1626696000">- Delete unnecessary gdb from BuildRequires</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-1" date="1638273600">- update to 1.2.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-2" date="1642161600">- revert "remove authselect compat package"</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-3" date="1647864000">- fix change date for version 1.2.4-2 in changelog</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-4" date="1651233600">- delete duplicate file README.md from authselect-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-5" date="1652616000">- provide default directory /etc/authselect</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.2.4-6" date="1660564800">- cli: fix memory handling with new popt library</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-7" date="1685448000">- fix the failure of login by root</changelog>
</package>
<package pkgid="f06136f611b01939af23d64591ce8d99f84b33fb199eb49cd3d8d89e8df6267e" name="authselect-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 1.2.2-3" date="1626696000">- Delete unnecessary gdb from BuildRequires</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-1" date="1638273600">- update to 1.2.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-2" date="1642161600">- revert "remove authselect compat package"</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-3" date="1647864000">- fix change date for version 1.2.4-2 in changelog</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-4" date="1651233600">- delete duplicate file README.md from authselect-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-5" date="1652616000">- provide default directory /etc/authselect</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.2.4-6" date="1660564800">- cli: fix memory handling with new popt library</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-7" date="1685448000">- fix the failure of login by root</changelog>
</package>
<package pkgid="f849ef484a09083769fa83d0fc5076eeef19b856945d9be4ae1117143a2e8bf8" name="authselect-devel" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 1.2.2-3" date="1626696000">- Delete unnecessary gdb from BuildRequires</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-1" date="1638273600">- update to 1.2.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-2" date="1642161600">- revert "remove authselect compat package"</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-3" date="1647864000">- fix change date for version 1.2.4-2 in changelog</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-4" date="1651233600">- delete duplicate file README.md from authselect-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-5" date="1652616000">- provide default directory /etc/authselect</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.2.4-6" date="1660564800">- cli: fix memory handling with new popt library</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-7" date="1685448000">- fix the failure of login by root</changelog>
</package>
<package pkgid="85c1dbb2f46d94c61be867cac276b90a273b84725791df875debd63cde7c816b" name="authselect-help" arch="noarch">
  <version epoch="0" ver="1.2.4" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 1.2.2-3" date="1626696000">- Delete unnecessary gdb from BuildRequires</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-1" date="1638273600">- update to 1.2.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-2" date="1642161600">- revert "remove authselect compat package"</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-3" date="1647864000">- fix change date for version 1.2.4-2 in changelog</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-4" date="1651233600">- delete duplicate file README.md from authselect-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-5" date="1652616000">- provide default directory /etc/authselect</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.2.4-6" date="1660564800">- cli: fix memory handling with new popt library</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-7" date="1685448000">- fix the failure of login by root</changelog>
</package>
<package pkgid="0c458c86f3d0e4d43581358b1d142e21ab55563417555fadbd4752e528c0d266" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="1da758f22ee49cd662824bb0411e1dc6daf50964a7b6cafbc545e74461fbff7c" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="ca0a057af2cf411313cdef80e045131d2891c9cb9ae1ae00b70dffcc6a980b02" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="7b11ed0dee0cf2b655735f3c5e75a63829d871740d6bfc48b2bc01037c5094c0" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="fc04704747f9a3acdd66532fa3dc3df7ef1e5f627a446f8fbbb4bbad4a22bc90" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="d4ac0944b76f058f83a4bca96f32385417ee961d69ce5fe33c7b34af1eab76ca" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="bbf983dda79a0bcad168dc4af55ef4e0f921ca366392888b4abd08ab1dac168e" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="288eca2af4ccf7d7abac7bd8e23baadbe77a58e0c027d425986516645383264a" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="32cbcd001fd31366501bba37894b5d45ce972e3fef0f909b5d90b0e1b901f80f" name="avahi-compat-howl" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="ddfe8f493ddcaf26260f040853b723d6b3c53999c8ace09f35e4732b2827ea04" name="avahi-compat-howl" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="82bf8408bbc478029a2ea46d64ea805621e984c9b03fee5cc41cfd262595f397" name="avahi-compat-howl" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="7b816f5d32e3cb0c3bcb8e2d5a51ad2710bb54ff27fb669dc71ddf1cb43e1c75" name="avahi-compat-howl" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="509cc6775667b393005a9db0401d523c4eb709b1998703c4e3899c71f98a286d" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="3f273ffd2c9a997308910e46203d90775e0a4f17fc587a367d98a3cb7457ddee" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="fa1b7e68740f339d0dbf0f50e1eb5e705217fde24691e8d44d0e29af9627142f" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="db98bd077dcbbbe681c3cd1111b21c4eebde8fb681de60259fcc082bf067b5d7" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="d98667ada5c5fa469e4d4dcabc97447533e4ebae54be57174b7b81a7ff39a564" name="avahi-compat-libdns_sd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="7bed52399995fc67f53ce949dd860d06b93876ed010dfe1d8b0d270df111ffb2" name="avahi-compat-libdns_sd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="43a3ff9c42084a0d6aff124c18c25875f5878e00f6b7315a350bf87856277a5c" name="avahi-compat-libdns_sd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="cc46f076c5b3e86c552d5839f4ef1e17d14c820f58ad7ed09c192c46d24b9235" name="avahi-compat-libdns_sd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="1bad68e37898180896019e250dee20f5dd8bc677a189001fef80c18a7e337614" name="avahi-compat-libdns_sd-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="fa90f3abb0fc532041997f0afda1ae532eb0815404d540bdfb42a04f89140a7c" name="avahi-compat-libdns_sd-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="bed14ab61314e7ac711501cf2650224e423bee4cb3087823405ecb4db2095fd6" name="avahi-compat-libdns_sd-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="4576699c2a1b3dca745a5da4cdfb89e3588a9a2c8d8d81193cf2284b0fc0aba2" name="avahi-compat-libdns_sd-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="cbbe6d23506b243d0ebca0ee54a6c2e1f9f695eb523f2f58f9527c137d6e7dd1" name="avahi-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="b44606520925f0d2993cb0ab82bd01cbf35e30d8ae4a529e4f5a4c9f0db2bc1b" name="avahi-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="67ae5d7835fe02c2b8362a109b0500a31ef85df2167d943809345521b66ce99e" name="avahi-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="f5b16bbf776157b6f7a412769eee7aeabb3a1c3a500452ea85888ddd7e07cce9" name="avahi-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="4aa93f8242a2f3c02ad59676e52787ec419ad8689b81d8393f99228d45724a22" name="avahi-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="54e297190a5e0fd9aece887846382da0403e538a7e31d5a808bcd205d2021734" name="avahi-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="25ffbfd0c2caa2445a763357305b62473fdd88b07d611b7adc6f27f02657fbed" name="avahi-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="dc549106c583a3c3be7271c6e8841a12e005e209f2b6c8adb48be1ecbe8e30f0" name="avahi-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="f0d04ace522a283777ad5ff7dcc31efb0d984b12ecd93a50f3043f7617da933b" name="avahi-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="4ad4505c80ab08d5e94771586d914ce34bbce20c306b02c1e571743102362072" name="avahi-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="246a89dff3e6b1f740000736a8943d8870b4438488b7c593673406f4d0d0fab6" name="avahi-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="d3abda379a5c3040ee782064ae8882496b9b79a902449e5345fa56300d745ce0" name="avahi-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="6b40e2f2f9dd92caaa67774c111545781d87097134ae4af1b889cdcaa6591c6c" name="avahi-dnsconfd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="5344aaca53607d99a7c0e760fc73747eb1782194353ad18bd5b8a860a87866b2" name="avahi-dnsconfd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="73cd546d54eb87671ec869f65f51e8fcc3b973bbf3cc4e3b460f361293d1a4ef" name="avahi-dnsconfd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="bb124b934d3403a9ada4d04b0f1b3f001a033a6267f994b8ea39c45a8eaa7d73" name="avahi-dnsconfd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="4c0f0b9b923630c87c601081f1aaebb4d40ce2a87d98cdb6bcb10ec97c72ceca" name="avahi-glib" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="633b5b95819be7ab78ad750ef0020abb30502dbe41d2c90d68edefd7b7102aa3" name="avahi-glib" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="fdc048392dfc1cfaa13b536bb0592458d43b4e3ffe4b1757a9c92cb65f98527c" name="avahi-glib" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="ccb3f8a92db115d9f27d7bd5c9bab715beb4241c10654cc3616545df9af85289" name="avahi-glib" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="e667bedcdaeab18f40ea869f86c7d02154a7b43d6d3d85add4f60d39b9679b6b" name="avahi-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="c0afe4b3d512f87c2f0950c5fc4b7954d80a12dac961f64c6bc09cc166ae5532" name="avahi-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="4956e71e14c0b45587832d7e255688f349297bdcbb570f7e22c39b4ad4f67ec8" name="avahi-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="2401bbfbafe25c2b036993d875540f872993b32efeeac44648d1c71db5b099a3" name="avahi-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="a07ea6fc7d754d932f15bc5ce9c32ceacde61bf1d4005197f1c6f25e556dfe45" name="avahi-gobject" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="560acdca1feaf6b1f1dac2f5e4c5ffa6d0de939c2e65fb6d3ef6f79113b46991" name="avahi-gobject" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="5969d6dcefcf84f80bdf9a13971a62d5a3bcfd2c0ffa4cf2d086e37a4324134c" name="avahi-gobject" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="f4defce36e232aacfb368ae6268342ac0b5cbdb49ec907e0b37de9f362ae9949" name="avahi-gobject" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="fed32f7584b9cfece2ed4744d8c148e5b9c784274b33da1ed053957e8cd7aa6c" name="avahi-gobject-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="a1b85ad7650fb9d75b9bdcfe009e9000d5616a45e4f07fad8cb533d1fbed0aee" name="avahi-gobject-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="abc0aff41bff4255f9633bfb4c97432dbe3b1502bf5d915a40fd1edb3fe221cb" name="avahi-gobject-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="78f08983bdf92285b4fb895391b0107f07cc99cfbd3ef1f1bc5534a3c3e6c3da" name="avahi-gobject-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="f283e7eecfc63be125eb14584e8313e0f270f1ef606c9bd7f0474e6e32af706e" name="avahi-help" arch="noarch">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="2565e78b5d77d5692129a9b26f7a33a1b0348b8bda308b0a509c5df05be7bb18" name="avahi-help" arch="noarch">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="39357c5f34d64671546e14e10127fb4232852bcb4153addc293d6bea18a3f0ff" name="avahi-help" arch="noarch">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="95eb1e3aa673385f8d85fab99132cd6c710e0f61382e1d9cbc31702bf6146c50" name="avahi-help" arch="noarch">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="ea078aa4690f0c4fc4800ec45143061fb04a6635f317e6ce5d4a5aed3688688a" name="avahi-libs" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="a2493c15e302bd375d28f26a700ab1c09ea198b5de0a37dd3ce61fd9ba5acd3c" name="avahi-libs" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="9a9896469ca4d9c4d87a6239f2816305a834bd9e9d0d8d44eaebbc141c6f7d81" name="avahi-libs" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="1861373dc97d594ed7fbf4e8b02d202363902e9930282a1adabcf41f4906cab0" name="avahi-libs" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="082fb28f6657a0c8f44b9b2fabce6df357e78af4f271007a1db58dd8b5b68069" name="avahi-tools" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="84836ebb73565ed8bd8daecb296cf8ebafc36721b3e44508d6877bc6ad53479f" name="avahi-tools" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="36da3dbd41295918113f0b9faf916ba42e4504a38d847d47d3fae693ae5c5ffb" name="avahi-tools" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="d956e3c1f9c758cd4d7b4f15355040fd1924acba10f788ffbea8e10cc8beb2fc" name="avahi-tools" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="bfa19fe29fc177a035c28e05fdc56862d368fd983b783ecebd5dabf44e9d8190" name="avahi-ui" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="bbb9539d880c2899d3101b7795c8ffe2dbe7f14b1d9ae442f68bbe691d7d0a79" name="avahi-ui" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="a477f83b49ccf267a71e4013232be15edb837f9a1618e49279a85b509de9f1b0" name="avahi-ui" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="d9fd82b6e08059159dc4de13522ab4d2f21e32723b9033c713a54d5333b2e5cb" name="avahi-ui" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="3f7b2ad5d7323cd8d1e44a0cd4d86123bb58f76bc8dc360f3c4b9300fef13e02" name="avahi-ui-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="7772016b6945f4e95d5009f952a614bc9ff962f221547a3f007a915eb280bd80" name="avahi-ui-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="7cf1269df97cd326d4a74d2a809a021fe42832a31d988fed5b572c1b9ab6d2db" name="avahi-ui-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="c2d3c42045d5ef65543bc0f88e91bccb43301450131354d11f39d058da3fab05" name="avahi-ui-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="ef0215af7ab3cfd70b0e0e2916ea096ccab51fe25fb413dbf8a315de5cbe746f" name="avahi-ui-gtk3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="8d21361e548304a22c431d099f805d1c80692a9d8f21990bb39a382094a49a46" name="avahi-ui-gtk3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="44a275ac46e051698c860fe903bac6cd8ae31bcd47cae30d14274e32d1c51f4d" name="avahi-ui-gtk3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="bd31658628d20103e97e29db23d2e8a28221719fd2d857829eb9cc4f6bcd468b" name="avahi-ui-gtk3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="abfb1d04532aaeb1ea58cc7c844b4d4f87ca5b79ab1ffb6932ea2a24dfefe592" name="batik" arch="noarch">
  <version epoch="0" ver="1.10" rel="7.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.10-5" date="1615464000">- fix CVE-2020-11987</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 1.10-6" date="1617192000">- Remove unneeded rhino and jai_imageio in classpath</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1.10-7" date="1672228800">- Fix CVE-2022-41704 and CVE-2022-42890</changelog>
</package>
<package pkgid="71140b61e4e5b6c4079bfca82b1f354b7c49e8736fee706f1a310cd4d4f66c59" name="batik" arch="noarch">
  <version epoch="0" ver="1.17" rel="1.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1.10-7" date="1672228800">- Fix CVE-2022-41704 and CVE-2022-42890</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.10-8" date="1675425600">- Add install require java-1.8.0-openjdk</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.17-1" date="1694088000">- Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730</changelog>
</package>
<package pkgid="01e21485b37ed7226d6cc3ee609dfae246bc91784f49f964f178073804a46779" name="batik-help" arch="noarch">
  <version epoch="0" ver="1.10" rel="7.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.10-5" date="1615464000">- fix CVE-2020-11987</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 1.10-6" date="1617192000">- Remove unneeded rhino and jai_imageio in classpath</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1.10-7" date="1672228800">- Fix CVE-2022-41704 and CVE-2022-42890</changelog>
</package>
<package pkgid="6d884b071c5e1134fe379be553f45ad698b542aefce8c229a4bccad7602753ba" name="batik-help" arch="noarch">
  <version epoch="0" ver="1.17" rel="1.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1.10-7" date="1672228800">- Fix CVE-2022-41704 and CVE-2022-42890</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.10-8" date="1675425600">- Add install require java-1.8.0-openjdk</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.17-1" date="1694088000">- Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730</changelog>
</package>
<package pkgid="df672fed5461b9e05e36f104de0c9407629ea3dc1798bac51d1e51cc267fa89b" name="bind" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="33c7da4aaafa928638d66df42105f1cb351b92b84914efa454794bcc1f9636f4" name="bind" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="b5ae85be49aae5b491b0ae8a9c81905ba8975029645ac8b6e9af3054786f2e3d" name="bind" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="7aa6fdcdf0d30125eed71e9edc35a40e6b06f599cb02712e948dd868c31598c3" name="bind" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="32621af9f8e37ccb637c42efd964b1a10e5fa8d86772a5a448585e61791395d7" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="c16230ddacbcf2c2019368253866ba028c0ff2be6dfc67dcc8eca129208a1403" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="89aaf26d29dad0e90744c71462feee3e0a361d24ab86588b7bf99ee58fa3c2fc" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="9dd8515e3dc7511d95e2f70eb4f6dffcd332aef899f5effdfc4b16fc86eeec8e" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="6ee15bbd6ed57b6cb6777da92e589d2038a0b6b1958f2bd2ccb17a17f0313708" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="602de6bbf747c15eee1adfd90798aed26b06b770f489966c821593e2c62c0772" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="c1e728618ff0b7bad116b69778675a5a02be8bca237ccd2ca0e5e12beefe5ae6" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="9f4a646831b78d561008d3645c9fb24f49ee653be3ec344bde00d8f786d9f1e1" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="fbdadfebf4f91eaffc1a6ae2eb76d30b90ca750448d19efdaecb786b24a69f8f" name="bind-debugsource" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="b50ad9274c6b5cf389102da9963905966d90a86a4a66a276a4deb6516bf9981b" name="bind-debugsource" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="32a533b0eed2eae80d4d94c88889ce28665f9eede331386c0fc0e4b530a1222c" name="bind-debugsource" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="5422739fb75c23c0bee80c54e300ccd4b48e33fb12c40e1b9e46c53859fb06bc" name="bind-debugsource" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="93aedb328389e314cc20704de4c729a4141b79bb8df565304706df96915180dd" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="526941fe4b20f95816d08d5d0f05cfdda608237e96617d4961c2cb4eca8ad027" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="f550cffa3af516b70cf8a6c73e2c55e6d2ee5fd09df813926e5d79f6c3a4b7fe" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="ba6af83e0312528feb113e89739123f4347f4f64c4568b502ff7a24d7e8babd7" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="16098208a11c48b08cb651dbd7aec34bb26fd8881a564f4a93763401b0d591aa" name="bind-dnssec-doc" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="45b742eee2a6b2b6dcd6c80caabf2fc054e9c546085b85449cf84f53c80baf74" name="bind-dnssec-doc" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="19f42a2e18e412dbf7bcc30afb6fab23779baea816d5a3501fb91112803f098b" name="bind-dnssec-doc" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="69f519cf90fc00056b89a84215ab4b2df153c120070131abd7d1d4be7f15eaff" name="bind-dnssec-doc" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="6a35bb0ad0d9d4fda6e54cbedf853e1ec071f621ee151f5b8826009ce74c92ae" name="bind-dnssec-utils" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="642290403c918cdc19c87686deb694d6ba3661e3592cd54b93b3eff2fe43e9ef" name="bind-dnssec-utils" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="f28542a1d44d58dc31ff4e09881e5484144a0df6e1aad91cf6606ec229fce10d" name="bind-dnssec-utils" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="ea7eacc941482bbb54d6cc9fce084018e8fbf323a6a64b4e9f9e64e4e01c6e54" name="bind-dnssec-utils" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="f1e0eb915687529348b89817350d4db19906f05c6f4f0dafc028dff0cee0909c" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="1c7a18a5b8e1dbdf2c470ec8eb5955d74c1e05c519c8b83b0630ccd48b765adc" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="9b497a94930b281a187bf77e3b916fd32dea8bb55870aa57609ef96bee441dbb" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="a5b8ce71df09e7f6f836cadbfed229d1aa1b8d6864cd528373f385cdbad39b73" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="14a5bbccf670e90c395b951072598dafdd95e9037c0f60542bd17aba454ae3a1" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="14f44f4b073fced82bf045fab34a0ad9b198b500e8daf409278bd6e91ed3f909" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="1fd5d3120ac47f5a4beed937c0af42171e1dfdac60950f1e607ced972ca9d524" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="eb5065da6172d3b30456dd7801f6ea7819a5ac100a9c7ec8b378113ef9d6ae9d" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="e3c13277a3d0419154fa8380b181cf008ffb2041940ab710badd6ff827b51ede" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="3082fb6ee3a89966e230eb260ad1dcf58dc177fddfa44a936cfa03f88c45ca74" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="42b7e3f08299fd7784ee7b9f15b33df26e748b7d1898083454cd526a5e784747" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="bd095540536954a986c8a1f269ca930b890c8e7c787e5420ff9e326dcd5826de" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="2a18295a615e515ea7db616c338fe11a8be96b2a454178f055df35abdb1ff63c" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="c7d69cebc5263775c9195c30fb1d0b0ac19f655ea81ebd4e4f022ae0ded2468e" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="ee84e75e122a110374330d7607d036658ccc7bb4847e778acaaf5c1cc36ab866" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="a5e7c117c41e74ecc012fbd062ab07b193acb6c9cb606bb17e2290ded43f1da6" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="3c86e45184b88e3f6698795e46176f130731f879400d54725c635cebae9c663b" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="40b19215d562e72fe71b4e3b306932c3980be8e76af27cfbe413619a2cc82cd2" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="8546126e97cc5eac694f81efd871dca74c464b0336c9ef7de4a5b28efa7ae2b7" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="3bf29f078f1c0eae0a61728dccc9102a63d751ae110921adc996cffdc28a01cf" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="c347050c4948042ed11e7b81f6b830b465bd4196a413cb3c6596f31cbea43a6b" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="edd262e34890520ddd78728e213622453a0ddf680747ffcc2123dfec3a21401b" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="be9125f0d02a1a2691914b938eb959556593b49428cb0e8bfd8325b3619fc55e" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="c30fb6eb9a2c59c3513ed8cfd66920819c677a3dd80ec6ce704b6c8445172566" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="d9202074d4493692f3eb27f8332a951c49c82c1f499df97c13f9234aaae38bc0" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="92a5e7c54bcb25348f9960d1d4c599f6d3b47f5533eecac40cb2b35056bca462" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="276809c5233830440c72e4d6c69bf2267b703f2fa50a5b25ba1d87dc71fef097" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="14bf5203bfa9d18efdaf4dab740d6fa1a11205a4ded8005e26aaeb1b3eefca1a" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="6a3ecdbd34d2cb88d4d31e3da83d1a0ed6c51162ea4ccf790d53f4b6dcea0e6d" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="19.oe2203sp1"/>
  <changelog author="Wei, Qiang &lt;qiang.wei@suse.com&gt; - 2.37-11" date="1662120000">- Fix man page empty issue</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 2.37-12" date="1665230400">- Fix Aarch64 EFI PE section address overlap issue.</changelog>
  <changelog author="konglidong &lt;konglidong@uniontech.com&gt; - 2.37-13" date="1666094400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
</package>
<package pkgid="0865699fd5b020bb5e0d95388cb24e27328a2a005b7d4bf68b57575bb7034793" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="23.oe2203sp1"/>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-20" date="1693396800">- fix CVE-2023-1972</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
</package>
<package pkgid="b7d2244548097335d25ba4489a363a3f6b7816caaffe71d42dfb68301399f672" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37" rel="19.oe2203sp1"/>
  <changelog author="Wei, Qiang &lt;qiang.wei@suse.com&gt; - 2.37-11" date="1662120000">- Fix man page empty issue</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 2.37-12" date="1665230400">- Fix Aarch64 EFI PE section address overlap issue.</changelog>
  <changelog author="konglidong &lt;konglidong@uniontech.com&gt; - 2.37-13" date="1666094400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
</package>
<package pkgid="a53c633c9815fad603c0413f367aba35ef948574f36dd44a027703344de2f26e" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37" rel="23.oe2203sp1"/>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-20" date="1693396800">- fix CVE-2023-1972</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
</package>
<package pkgid="e375e05a43d04cc9c504f4b5e1c560666ede0ddd56618b110e197af5760371f8" name="binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.37" rel="19.oe2203sp1"/>
  <changelog author="Wei, Qiang &lt;qiang.wei@suse.com&gt; - 2.37-11" date="1662120000">- Fix man page empty issue</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 2.37-12" date="1665230400">- Fix Aarch64 EFI PE section address overlap issue.</changelog>
  <changelog author="konglidong &lt;konglidong@uniontech.com&gt; - 2.37-13" date="1666094400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
</package>
<package pkgid="7889b0182bff8cb14b29bdd801197577c177373e9e0220503e76f8a055545814" name="binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.37" rel="23.oe2203sp1"/>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-20" date="1693396800">- fix CVE-2023-1972</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
</package>
<package pkgid="bd10041d8af4350cd713ecc7b51b3be59902b6aa207be0c3894f568682e346c2" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.37" rel="19.oe2203sp1"/>
  <changelog author="Wei, Qiang &lt;qiang.wei@suse.com&gt; - 2.37-11" date="1662120000">- Fix man page empty issue</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 2.37-12" date="1665230400">- Fix Aarch64 EFI PE section address overlap issue.</changelog>
  <changelog author="konglidong &lt;konglidong@uniontech.com&gt; - 2.37-13" date="1666094400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
</package>
<package pkgid="e4b932b14c1db59dd20439b1eb5f666c8ba542cff31ba316835a68df11829f35" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.37" rel="23.oe2203sp1"/>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-20" date="1693396800">- fix CVE-2023-1972</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
</package>
<package pkgid="a84c1bf0759588dcd7cb432f126e089299246bcd6bf1aea016a83f5eb0a53956" name="binutils-help" arch="x86_64">
  <version epoch="0" ver="2.37" rel="19.oe2203sp1"/>
  <changelog author="Wei, Qiang &lt;qiang.wei@suse.com&gt; - 2.37-11" date="1662120000">- Fix man page empty issue</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 2.37-12" date="1665230400">- Fix Aarch64 EFI PE section address overlap issue.</changelog>
  <changelog author="konglidong &lt;konglidong@uniontech.com&gt; - 2.37-13" date="1666094400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
</package>
<package pkgid="9df2090dc021d827799fdc93a5810f35c6a4526379cec070e9c9e1517b4802c2" name="binutils-help" arch="x86_64">
  <version epoch="0" ver="2.37" rel="23.oe2203sp1"/>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-20" date="1693396800">- fix CVE-2023-1972</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
</package>
<package pkgid="a084f21e3475ccd669f04a22b254f5af1c24c4c41d13cc21259ba339b6229eca" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.54" rel="17.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
</package>
<package pkgid="c3415e46a53e3889d351700e4e3545f4f6f825204edeb0eb259966d4f4323f48" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.54" rel="18.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
</package>
<package pkgid="d0f8d38c2a3d5e7e5ce4a340c9024133bf0267596a2d6b323b5e236cb676095b" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.54" rel="19.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-19" date="1703246400">- fix CVE-2023-50229,CVE-2023-50230</changelog>
</package>
<package pkgid="90d5759b12a2d29d8691943466ce05c6b5246c8d4c451f33c8c8bf4105d10b85" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.54" rel="17.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
</package>
<package pkgid="47e44f7d5af53b6d71a133211a13400edd49eac5928d8042f63c5f20a44e202a" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.54" rel="18.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
</package>
<package pkgid="20b05fddd0b22adcb33bcd59b2bd6830fe0966fd779be0e805d85c6c1e5b5a91" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.54" rel="19.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-19" date="1703246400">- fix CVE-2023-50229,CVE-2023-50230</changelog>
</package>
<package pkgid="d5148b474e92674aa7c110849bad2a1b2d508102f0101874423c3a05916496f0" name="bluez-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.54" rel="17.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
</package>
<package pkgid="6754e8a65ac26af0619a82d43a5fbe85bdf11dc8a9df43e1c6fde5ff543a197f" name="bluez-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.54" rel="18.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
</package>
<package pkgid="6b42ba6bc1be037e600f1d6735e32e19bc107127fb4cdba8d99cd369dc936eb1" name="bluez-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.54" rel="19.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-19" date="1703246400">- fix CVE-2023-50229,CVE-2023-50230</changelog>
</package>
<package pkgid="627301be8ad3322e31892e0c149706c88f974c86fcd4f9fbdd0a2b7938c12a1b" name="bluez-debugsource" arch="x86_64">
  <version epoch="0" ver="5.54" rel="17.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
</package>
<package pkgid="846237be26be58b4659a69d776549c80a21bf92da4a171b075c57f60a89cdb94" name="bluez-debugsource" arch="x86_64">
  <version epoch="0" ver="5.54" rel="18.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
</package>
<package pkgid="7dd5b3f4e6af98e0c540a8464f31bb94c10765ef5f80c1a4e42b1e60a56675b5" name="bluez-debugsource" arch="x86_64">
  <version epoch="0" ver="5.54" rel="19.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-19" date="1703246400">- fix CVE-2023-50229,CVE-2023-50230</changelog>
</package>
<package pkgid="39b6ec99dcc6d087fe8e6ce0be881be4a06803d59ce81d3f71c92f616b54ecbd" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.54" rel="17.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
</package>
<package pkgid="63aba2e606617c97e871e48ea6faff1e2c92a215c6a07159d4a4b88a70bbf7ad" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.54" rel="18.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
</package>
<package pkgid="3e40a1140237b76af645be820b23c3daaaa3e8a4bc7a6738d8bf5d7b7b0bcd22" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.54" rel="19.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-19" date="1703246400">- fix CVE-2023-50229,CVE-2023-50230</changelog>
</package>
<package pkgid="0f78bb7b48043fa8086529f47a26a14c2361ad702f0d3beadc7a2b1c44adc304" name="bluez-help" arch="noarch">
  <version epoch="0" ver="5.54" rel="17.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
</package>
<package pkgid="f144a356bd4dc65e59d4f5bd68bee011c7c4bab14513158d470f08850be4eef4" name="bluez-help" arch="noarch">
  <version epoch="0" ver="5.54" rel="18.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
</package>
<package pkgid="fa619667ff9e5638c57a8bc286467ebaf38fe43479404908eb3ae9071e336568" name="bluez-help" arch="noarch">
  <version epoch="0" ver="5.54" rel="19.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-19" date="1703246400">- fix CVE-2023-50229,CVE-2023-50230</changelog>
</package>
<package pkgid="f0b900ab755553f948a8c9401907c25aa173cee9ddeac5d1aac4dd70397b2107" name="bluez-libs" arch="x86_64">
  <version epoch="0" ver="5.54" rel="17.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
</package>
<package pkgid="b47c2bb4a484d4120b2d28f9c52c2f9c303ccf8d8db622a7ecd22c12e08554e3" name="bluez-libs" arch="x86_64">
  <version epoch="0" ver="5.54" rel="18.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
</package>
<package pkgid="7c519a7db938230c6ea89b3fae2f6d3040f01832e3328cec75096f4673430cad" name="bluez-libs" arch="x86_64">
  <version epoch="0" ver="5.54" rel="19.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-19" date="1703246400">- fix CVE-2023-50229,CVE-2023-50230</changelog>
</package>
<package pkgid="95e116d9be78160be619cda4afcc1c75b58935aec5451ae3bbf802c6c22fe466" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.67" rel="2.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 1.61-5" date="1627732800">- fix CVE-2020-15522</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.67-1" date="1669377600">- Update to 1.67</changelog>
  <changelog author="licihua &lt;licihua@huawei.com&gt; - 1.67-2" date="1687694400">- fix cve CVE-2023-33201</changelog>
</package>
<package pkgid="d53209bbb8ff6b0fc7674f9956ed791939cc36c261c6ca98ce2eec8fa03497c3" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="479e86b1bb4d82a0f12cb0be1cffe80975587c754a77ccd985c9dae3dc183998" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="a0023a8ee86fdb8a5266c73ef545ef0c57d59fe4ee9a134225a5d806ec3e823d" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="a24265ba0502f6c94a45b895230b46587e50e92cb7cf232e32718f47a54eb85c" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="d3922476257fba63bf95ba02e4e80fd65e075f676dddd54df287bd9f0c68816a" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="cc1e571597e3c57b55750d9e0e5d4bbb1b78ba9756cfd7c1e7bc4d9acb3b7753" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="3e74b0540121919ff33f8eccea013d0ad02f7085fe777a1c603cfde97b7a6472" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="ca9f649997390219f35f90d5a896385a1540b87a0da3534c41b6abd8033bcf9d" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="c22cf273f40b5f4139cb40d2f3b3a2e6fafe4eb7785d514a0421c9bbf6488e34" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="3f82bf22276c091f1d0db2e393e6bd19dd714b5aaec2a83307dea551d1edbfc0" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="3a5cf1234ee4a74c6ec1b1444dc948443c599331c7cf109e96c82cf769da91da" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="dc20b658982dd84a604e3ec06a3bbb059283646370efe0652b4fbfee3bb332f5" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="c359155839ecc3d1afe8257aeae859a075203244c45605faeb8e78492e667315" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="4c858adfed9896ffcc6e374d6111bc7591b4830bca2a426d7fe2d1e6511c479b" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="a71e451b3abf82ef043d17967d21ba576850333aef011c5b40b8ba271d609669" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="f3535d02a4a9bd4a3810024b70e0afe6b8b7b23290a3afb9e26e915880522384" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="bc18699bc4ecb55e79b19b080d701e5ccca0be8c9c75b291bb2463084960539b" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="fdf406ad8ee7bf3662d675f975c65c46de5679303e72c1ccd7ca9c122faad0ae" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="6f8f5f36dce7358eb65ea31f49cabfd78ea6919fab8f7c2276c76527baefabbd" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="83deeea5ac86940cc7b6b57f6384929474f082f46b388aaf22a1da421cee3ebd" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="3236f24f9fd6a64ecab812589e852b1f522aaa19d9d26bfe592fef0b4a4b4da7" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="58d82b67cfcf931d1a4b1fd43b58eb01e867bc83c5d9c5e470cb754b86559092" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="c83bba2f82272802573dc6c8f55ff53aa65bbfd7d47bbf9e8a73ecd64f94fe50" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="b6b69aea31bda7a64df1077af6dfaa9157baf279192c04f2efaa0b0ab0eeed37" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="3c847b2f33959f4267a4ff9656d503c23dad6fc4ade21df34689062574f97bf4" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="8b56cd1f11d400baf9e4781de7fc3734ca1f8a65abc4cc698494dcc2747bba39" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="0056daa8e1dc03fcf02921233314d13011c3e9a307230aaec9403a98ec3276e0" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="ad17f7e974a72d11d4599391240eee63700cde041f0bd16415990f81890f6935" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="955fb7de453d98d2ec89fb170acd01f6b929de834080386643b0e576f7cfb4c2" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="2b7071c6a6276fe0c4bdd83dc5c64855f19976fe2828b511abf28362b6512e07" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="9f10c488c9cd163662f452216ec43ed0cbe1c7418e3fdc13306af5925c862752" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="15d044bc89fca5be5d9c6cbae8895043e8c8d1d6237f98a03ade6e89be698eb2" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="e63c006257c752e3de7b620dff17ac99ab4b9f78f596725e0e485b7030407690" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="845abcf1ac708628515ca695feffa95c5a8787b6487586c4b7625ea6b3bf3a97" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="bbc0b5c996377722c81a46f32fa4c76cc37b83f623290b2d492ab2e9ed31a320" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="98838dc3f705dbb28a4993e07b316f7cf67de8d6041e5128c829eb9eba327bfd" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="202cbc63e8d0b5b6db439998afaaf7763bca698ebfe722569deb65d8350adce6" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="ffd348179ff96b25c1acd7e7422abea79bf9db7642a585780a40c0a6e4bd2536" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="c6ec8bb29d643f2ba4190fdd0cef69d0a0aff8666494171f0b9e642b831b1082" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="4c61f5c9d3542afba19e0cd45845d6b4cc9914cdeb571eaee1b14a2f1de53691" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="d348ff1fc583b773d227ce3f204927d6f0aa967e29ff4add1f4700c3ad51539b" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="981beebb1ab3edddf77fe8fb63f5e7bedd162587346670303b6b75b4ae12987e" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="8a70e9dfbdc0717f969fe786369337fb8f96af36183093a0db8c3d7086b3c3b7" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="97b7ac1ec49460df130f111ae83532a5a652cd68918a977c6dbb169ac58aa229" name="bpftool" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="562a2d15bfac4035eab1b265c4c567192bbbfbaf0f5ebd6dc95e6a1907988de0" name="bpftool" arch="x86_64">
  <version epoch="0" ver="6.8.0" rel="2.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 6.8.0-1" date="1700568000">- Init package</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 6.8.0-2" date="1702468800">- Combine main package and subpackage. Keep consistent with the previous version.</changelog>
</package>
<package pkgid="700898b0beb6baf78d9aa217d4dc81d3bef0ff9bb2b308266b5ace6329898ed1" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="dd2a4856956b2d363998a30b5760c92bdfef5a93278acf142c42c496db5c1f2e" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="be8ff08ff64c52135ac234e1a0b598419b1e33801b9c17652aa4598c558d2aae" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="368ec60865d5aaddadee8382051cb0f9462f26933709df05f038186bdcd2c2eb" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="06ba49636a68d3ba872199b59166b5d34bf8c7dff52a4781eb0ea57f8d6066ea" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="dea247324cdac21ee2061c64d6bb88a70254974d17b278302a18b81ffd9a6d25" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="c63eb5ff0ff64652f1b3e2939a87a29a3e841052c3ffa5ca33c85dafc54d6992" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="988a918ce9fea93f9b289f6d2bd3c991fd1587ef86c47801cd936eb8b073e840" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="865c9c3c7c94f2018442dc73a807724222a5a489173c3cb01d963d58cff582bc" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="2be3246e45ce637863342c031ce9bbb6205c06536ec99e26df1ec8837c9c2e8a" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="81afa410596b32ed46fcdbddadcf7fa5bf05440abc3b3fd82931fab0f2c26ab9" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="d45adce37616906fd15976888a42cca75d6220015b2a7d9b3d71926abed7e83c" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="1fd0d3c1483f6825020139af5b07c9cee0fd5ad709e4e907020dcde898e0f484" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="3262770a8a3e1522a0b5387bc18e5fa6b6601b546c683564c103eaa67a6b4a81" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="4798046c44724f377b86b87e1c1582975f19f03acb4f3cac493408349e480271" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="08175064f2f2b21e5354a47970549b2f6a8daadfda3a501bac77291509df74b8" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="c3ac4b18f26ddfcb04553d7d344fde5e56bd3ea40f54dd1e7e7a15a6974e8fa1" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="f9a97322844dbfdb97d5b2ead55f6eedbd3fda6fabeb5cb57823cb1d850acb84" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="93412ddc8fcea2885aba7d6dbb6a3bcfd51f8a5e4dffdafbf1d9ff7af49a964a" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="94aefc73b6734fc221a338accf1f43563955e379fae82d8a4c4c072f09c47352" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="87f7552f9ae1cf9c71f008f49a881e5b49db649a7c8427b9463b4858fe50a19d" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="01d87d927b3a8458ad5a5e4dd607cffdf40c60a418bba3cbe0b5a77696e315c7" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="71451270dba94c46ad4931cb92512786f90d23079591cde1d9f0f7a5d08339cf" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="fc264db6ae64d7f9f13f7c4b1c656d86bfd9a1e8b6ef0c5cc6fa08c65a950bd0" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="113b92a26c3befd0b0c488f804fe59ab00747750d3d52e6f2bdd43fec4498269" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="2fd031080eff494888fac1df53d9494b8401a05b35bb14d12ae71572de21999d" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="0a6239103d86394bc37c0b4371114ee4eaa5853d4b71ad365e77f74e20e909f5" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="6d898d7fa58d86f0046b943aa8c6efa46766679fc10be307e7ea20232bbac1e1" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="adb9ef2fe2b97b6139c9195a130c76b44e4aedc623baa7c1b3c7af991b922304" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="049177b40c7f6eac410c0e6e4dc8e527b688f5c8e1a73cc6830d9f289c9e034a" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="5b8b162ea8e241e0c896cd13c4a1855fdd6d3a9bc2301138b02fcfc800590e46" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="5ae910aa02a4fed87523e82195d14fd370a586f910e035e7f2959683aa83a76f" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="1045694bc550831e4f348de8e702cf707000d03067b52ed87b45cbd0ab28a4e9" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="dd55374a99fee307ae061e8c1480f5159b4eb3d83128cbd9c51494f0278a366a" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="63e21952f59f962a239f0c5bed75148915a5151c659a09d9325bbfbfa917e457" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="f93b85704402d8223afa60a499a0ac32f502b327664d8fadf311cd6c8e7236ce" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="61b100109171dbc6a4e8cf3b607a28aa710b10772e4154f57a27f235b99abf9f" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="b01882628badad3032f8af2bf3336230e2ade25e66db6eb9bc9728f7e5fd2fc6" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="660d13140902e7bd20e9faf6bb4ad3264e412c6f060c08d29e6c9924eb762e26" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="71054693018c994ac53aa23e6daf27e7118d7a5dd72cc9dfbd7e0f6ccfb89c60" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="96e96ccb18600c18f764509087d9919c88fe6066fea2882293851e78dc0fc7e1" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="f6616d6951d18b50b12afc5a8ad5bdf47f38bf26ed52388dafbcd7e0615efcf5" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="846d565173e6c67f477511703f16da7b65a410a5da61d17f086041593d5480cc" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="b43e655bc8a73913fe22f1adada68994a44b788ab7ecea96e9f227254dd7d9c6" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="fbc671c68993a784ff43da7fa7321adbdaf00ce6d5793206447810550a4bbee8" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.8.0" rel="2.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 6.8.0-1" date="1700568000">- Init package</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 6.8.0-2" date="1702468800">- Combine main package and subpackage. Keep consistent with the previous version.</changelog>
</package>
<package pkgid="c5bb992a4f3887e4cfe3bc6e63c331d8e10fd7991773cffb8680302d5b07bf3a" name="bpftool-debugsource" arch="x86_64">
  <version epoch="0" ver="6.8.0" rel="2.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 6.8.0-1" date="1700568000">- Init package</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 6.8.0-2" date="1702468800">- Combine main package and subpackage. Keep consistent with the previous version.</changelog>
</package>
<package pkgid="3a70494054c06af829d125089bf9b1d6c0b30dcae9762ac0e523c370a788640d" name="bsdcat" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="85fca3a8a9c15ed4c811b69a52e6ef3862a358f2ad045b1ea4d1ce48dcbeadd3" name="bsdcat" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="9858bdd6557a0d020b6da2bdba253abd10d5059ca376473158054ee8525ae69e" name="bsdcpio" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="0df3953e97eca7f0bdecdb69e2bdaf80df5cf515eaba5e711779c7494c81504b" name="bsdcpio" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="9f6fe89e831e742859e6426784c434ef50193be08691c12f458b020ea34f94a8" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="e8840f382bb7f9ad9517813749fb74f80e07f7b812a90e002d322e2ba3952388" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="41170a30c0014bf225255a1e1fd0db973d3a6bcaf9901e73875c7321ec02e73e" name="busybox" arch="x86_64">
  <version epoch="1" ver="1.34.1" rel="19.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.33.1-10" date="1637582400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42374 and CVE-2021-42377</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-11" date="1637755200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42373 CVE-2021-42375 and CVE-2021-42376</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-12" date="1637841600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-13" date="1638187200">- Type:enhancement
- Id:NA
- SUG:NA
- DESC:update busybox to 1.34.1</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-14" date="1650369600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-28391</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-15" date="1651752000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add epoch field in spec file</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
</package>
<package pkgid="f993f278d404dcc60475b39519c34b62f792baacd771e61e1829bb646fb27701" name="busybox-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.34.1" rel="19.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.33.1-10" date="1637582400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42374 and CVE-2021-42377</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-11" date="1637755200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42373 CVE-2021-42375 and CVE-2021-42376</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-12" date="1637841600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-13" date="1638187200">- Type:enhancement
- Id:NA
- SUG:NA
- DESC:update busybox to 1.34.1</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-14" date="1650369600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-28391</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-15" date="1651752000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add epoch field in spec file</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
</package>
<package pkgid="2f30db013bf4e4f5cbdf8bbcc1030201afae12f4f87faa0fca7cee9a98a62234" name="busybox-debugsource" arch="x86_64">
  <version epoch="1" ver="1.34.1" rel="19.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.33.1-10" date="1637582400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42374 and CVE-2021-42377</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-11" date="1637755200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42373 CVE-2021-42375 and CVE-2021-42376</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-12" date="1637841600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-13" date="1638187200">- Type:enhancement
- Id:NA
- SUG:NA
- DESC:update busybox to 1.34.1</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-14" date="1650369600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-28391</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-15" date="1651752000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add epoch field in spec file</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
</package>
<package pkgid="aabdbf2f1d9ed00c693159f87d2f14f461b1a826cf697b6be227836bda1b3f2c" name="busybox-help" arch="x86_64">
  <version epoch="1" ver="1.34.1" rel="19.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.33.1-10" date="1637582400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42374 and CVE-2021-42377</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-11" date="1637755200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42373 CVE-2021-42375 and CVE-2021-42376</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-12" date="1637841600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-13" date="1638187200">- Type:enhancement
- Id:NA
- SUG:NA
- DESC:update busybox to 1.34.1</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-14" date="1650369600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-28391</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-15" date="1651752000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add epoch field in spec file</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
</package>
<package pkgid="736a116ccee3d67cf1409a3f42af3cdec63db615757a235b1a2ce8310cfcd873" name="busybox-petitboot" arch="x86_64">
  <version epoch="1" ver="1.34.1" rel="19.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.33.1-10" date="1637582400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42374 and CVE-2021-42377</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-11" date="1637755200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42373 CVE-2021-42375 and CVE-2021-42376</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-12" date="1637841600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-13" date="1638187200">- Type:enhancement
- Id:NA
- SUG:NA
- DESC:update busybox to 1.34.1</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-14" date="1650369600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-28391</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-15" date="1651752000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add epoch field in spec file</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
</package>
<package pkgid="2e95dc2f5af3bb3097e58da6e2ecfa86964ba1a013326ca69becebfd333c9ffe" name="byacc" arch="x86_64">
  <version epoch="0" ver="2.0.20210808" rel="4.oe2203sp1"/>
  <changelog author="wangjie&lt;wangjie294@huawei.com&gt; - 2.0.20210109" date="1612180800">- DESC:upgrade 2.0.20210109</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; - 2.0.20210808" date="1640433600">- DESC:upgrade to 2.0.20210808</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2.0.20210808-2" date="1656504000">- DESC:enable check test suite</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.20210808-3" date="1669032000">- Modify invalid Source</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 2.0.20210808-4" date="1672056000">- fix CVE-2021-33641 and CVE-2021-33642</changelog>
</package>
<package pkgid="0afce4e201bfa4a7859650257cccfb4d7cc0b59e3b479aab992d2cb7e92295e7" name="byacc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.20210808" rel="4.oe2203sp1"/>
  <changelog author="wangjie&lt;wangjie294@huawei.com&gt; - 2.0.20210109" date="1612180800">- DESC:upgrade 2.0.20210109</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; - 2.0.20210808" date="1640433600">- DESC:upgrade to 2.0.20210808</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2.0.20210808-2" date="1656504000">- DESC:enable check test suite</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.20210808-3" date="1669032000">- Modify invalid Source</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 2.0.20210808-4" date="1672056000">- fix CVE-2021-33641 and CVE-2021-33642</changelog>
</package>
<package pkgid="730681f599b3e9a4a47dc164def78d63c522e6b9696f693b840a4928681d13e4" name="byacc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.20210808" rel="4.oe2203sp1"/>
  <changelog author="wangjie&lt;wangjie294@huawei.com&gt; - 2.0.20210109" date="1612180800">- DESC:upgrade 2.0.20210109</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; - 2.0.20210808" date="1640433600">- DESC:upgrade to 2.0.20210808</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2.0.20210808-2" date="1656504000">- DESC:enable check test suite</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.20210808-3" date="1669032000">- Modify invalid Source</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 2.0.20210808-4" date="1672056000">- fix CVE-2021-33641 and CVE-2021-33642</changelog>
</package>
<package pkgid="cc672aea6bf72dc3d01c8249162347644058046e07f088ff9a9a1f5f061aa69a" name="byacc-help" arch="noarch">
  <version epoch="0" ver="2.0.20210808" rel="4.oe2203sp1"/>
  <changelog author="wangjie&lt;wangjie294@huawei.com&gt; - 2.0.20210109" date="1612180800">- DESC:upgrade 2.0.20210109</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; - 2.0.20210808" date="1640433600">- DESC:upgrade to 2.0.20210808</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2.0.20210808-2" date="1656504000">- DESC:enable check test suite</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.20210808-3" date="1669032000">- Modify invalid Source</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 2.0.20210808-4" date="1672056000">- fix CVE-2021-33641 and CVE-2021-33642</changelog>
</package>
<package pkgid="c20c86c3a46019539738139888d30870dfae2c044fab3998839c7329b4262d6f" name="c-ares" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
</package>
<package pkgid="588203e1ad0426ab584c2a93c6e9f77c5bc949c92710ff87b346f46bc4157a41" name="c-ares" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="f60a7348894145c3cad3d974987a8522215735c232fd884bd1458fe61fea728a" name="c-ares" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
</package>
<package pkgid="abb0aaf3ccc90d545cf29d5fa13d5a78ef14950c621f4593baf6171958233f39" name="c-ares-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
</package>
<package pkgid="3757c0e98c60a93bf42d6eae702097b2e63c1f620cdcfe48877d07494a5d9bba" name="c-ares-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="039d2b7dbe6160978ec3312374e99f92595fd5128508b0eb84d79f9411f41431" name="c-ares-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
</package>
<package pkgid="d61169271792803ee05edc28a3d286f5fe4a05476ef257d60948919d2e68c2ed" name="c-ares-debugsource" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
</package>
<package pkgid="09579851f03d8e3fffcb870dbebea5939b2fde719b79d70a3d700cf4be20a587" name="c-ares-debugsource" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="f1e3b246e96e1510f27bc75437383b95d9bc4f342f02bbdf23c71b4b89a78b4e" name="c-ares-debugsource" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
</package>
<package pkgid="9d2f383371abb4bdfe042f750319eff664cc827b009de9d278f47c6c69b7f3ce" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
</package>
<package pkgid="2d3a18869899abfe8c035f6973414210148d35ee9a9d4ba5f512b5b19a2eb9fd" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="73f332358e58cd28317b1ee5fafbd47ac00c54e9ca73539853a1405da2b9f315" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
</package>
<package pkgid="f9a11cea6ce47dd606094ce3b7d2e67f24149fc59b8bc6b464a61920e46b93c2" name="c-ares-help" arch="noarch">
  <version epoch="0" ver="1.18.1" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
</package>
<package pkgid="8f273fa8b005081828215737b609581dad241a73fe3ff330ce92c81d721f87ea" name="c-ares-help" arch="noarch">
  <version epoch="0" ver="1.18.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="76ba865afd417f003fea1313c147a8d0e11f43e968aa072b83bb9264f476605f" name="c-ares-help" arch="noarch">
  <version epoch="0" ver="1.18.1" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
</package>
<package pkgid="de35c2b7231131ef3ff38322ef3fe19e4ec98008b4a23277e0d2f3b276ffb11a" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2023.2.60" rel="1.oe2203sp1"/>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 2021.2.46-2" date="1623326400">- Refresh the original the original certificate file and delete the insercure certificates</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 2021.2.52-1" date="1638360000">- upgrade version to 2021.2.52</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2021.2.52-2" date="1666440000">- lagging install ca-legacy and update-ca-trust</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2023.2.60-1" date="1686052800">- upgrade version to 2023.2.60</changelog>
</package>
<package pkgid="9d74805a2120c4490012d33e297e7f4d328ef3ef1f4cfe7c6678724bfcf456aa" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2023.2.60" rel="2.oe2203sp1"/>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 2021.2.52-1" date="1638360000">- upgrade version to 2021.2.52</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2021.2.52-2" date="1666440000">- lagging install ca-legacy and update-ca-trust</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2023.2.60-1" date="1686052800">- upgrade version to 2023.2.60</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2023.2.60-2" date="1699272000">- delete the unsecure certificates</changelog>
</package>
<package pkgid="b21d16af839e7c1608789c2e0c31167ce8a92d09bc04525f4f25c61ff768eeb5" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.60.0" rel="3.oe2203sp1"/>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.57.0-2" date="1664193600">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;wangkai@h-partners.com&gt; - 1.60.0-1" date="1680609600">- Update to 1.60.0</changelog>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.60.0-2" date="1681214400">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.60.0-3" date="1708171200">- Fix CVE-2024-24577</changelog>
</package>
<package pkgid="9c63230bb31870623a81edff39d7c6ed84c9def4a7917bbdc451811a68d3c70e" name="cdrkit" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="51.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.1.11-46" date="1666699200">- rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.1.11-47" date="1667476800">- add sw64 patch</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-48" date="1668600000">- fix empty link</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-49" date="1669204800">- fix spell error</changelog>
  <changelog author="yueyuankun&lt;yueyuankun@kylinos.cn&gt; - 1.1.11-50" date="1698667200">- Type:update
- ID:NA
- SUG:NA
- DESC:delete Requires git</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 1.1.11-51" date="1704369600">- Type:bugfix
- ID:NA
- SUG:NA
- delete autosetup macro in changelog</changelog>
</package>
<package pkgid="829ca87a94dba443564695fcbf5d9fdb173fe5409b766d733480934df9138133" name="cdrkit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="51.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.1.11-46" date="1666699200">- rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.1.11-47" date="1667476800">- add sw64 patch</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-48" date="1668600000">- fix empty link</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-49" date="1669204800">- fix spell error</changelog>
  <changelog author="yueyuankun&lt;yueyuankun@kylinos.cn&gt; - 1.1.11-50" date="1698667200">- Type:update
- ID:NA
- SUG:NA
- DESC:delete Requires git</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 1.1.11-51" date="1704369600">- Type:bugfix
- ID:NA
- SUG:NA
- delete autosetup macro in changelog</changelog>
</package>
<package pkgid="741115a8fe7de66ca42d18fec2e0534c710bb76a69247e95002797181198056c" name="cdrkit-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="51.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.1.11-46" date="1666699200">- rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.1.11-47" date="1667476800">- add sw64 patch</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-48" date="1668600000">- fix empty link</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-49" date="1669204800">- fix spell error</changelog>
  <changelog author="yueyuankun&lt;yueyuankun@kylinos.cn&gt; - 1.1.11-50" date="1698667200">- Type:update
- ID:NA
- SUG:NA
- DESC:delete Requires git</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 1.1.11-51" date="1704369600">- Type:bugfix
- ID:NA
- SUG:NA
- delete autosetup macro in changelog</changelog>
</package>
<package pkgid="3a3dd5094852d6b559ac5bf1c1642276f8950e3988d2d9a06c3604bb4345fe4d" name="cdrkit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="51.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.1.11-46" date="1666699200">- rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.1.11-47" date="1667476800">- add sw64 patch</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-48" date="1668600000">- fix empty link</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-49" date="1669204800">- fix spell error</changelog>
  <changelog author="yueyuankun&lt;yueyuankun@kylinos.cn&gt; - 1.1.11-50" date="1698667200">- Type:update
- ID:NA
- SUG:NA
- DESC:delete Requires git</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 1.1.11-51" date="1704369600">- Type:bugfix
- ID:NA
- SUG:NA
- delete autosetup macro in changelog</changelog>
</package>
<package pkgid="c8dae2e9b7ba4a16bc03227a4403c65d01982ca8bf87d32ab0e88d0cf56e8fbc" name="ceph" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="8eb455dbd7109f50e5a934731f260093fd769f3b293f0efd50df16b9396f744d" name="ceph" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="883c0f90bf9b567022c5b9123da7be7010c9a737447de139241743a7254fd616" name="ceph-base" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="19c73681b0fe6933776029e39b85b2861356fcb8b38b2b1058c1340d92bc3f5d" name="ceph-base" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="458b6bdf3aab13d5c209f7556f2d08373079bc1c964cb2f4e31a17fcc43ed248" name="ceph-common" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="8f2f09252343e229370a004a07ea604e981be1828f09209185c02a6e13a4efb6" name="ceph-common" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="48fac1c194c723ce4b2bf6d58e1826810175c66bec429b0a38ce8b01f865011c" name="ceph-debuginfo" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="bed31230bf5abc1b68182867ed63ae9160b28592aa147d68e7a55b8c201e1919" name="ceph-debuginfo" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="50c910e13278956dc1bff72ccc4c2a483fd2527c32f03db8b8170d0ed059ecb3" name="ceph-debugsource" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="0b88b96d07a6b81f5cf608762fad098c5b13f031d4576687931d47d96b94ef82" name="ceph-debugsource" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="68a1d4f34de67818b0271ca503a141dca29fc25ccb74fd65750dbabc342f595c" name="ceph-fuse" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="97be7bd083312c1bb6fdb724e1a94312b9fad3790d1fd4cc1b893118c360afe0" name="ceph-fuse" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="6a9c9bc3bf096d257c736d2087556bd63d696fe13d50881b0dd0fe4110689491" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="477c34aa978038adfb3c9fd90badea5338453869a8017e71f4d7989a2db9dfad" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="13037aced03b188a29163b34e16fddb23f4f4353b367db6020158e3a8f214f13" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="e8add2fc532f02d476cf901743e32a52f664631a440e9c62ea59a0691fd92a91" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="e4c3f21e7542147dbdefb7deed4c95855cce74b51f0bdfe068ea4ed262b2d0e2" name="ceph-mds" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="f6a861ca4f07aabb4c8733a7b4fe75752f34f44e4ada65759754a577ade91748" name="ceph-mds" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="a3c174e3d65e02824bbc553cd0b0ff4088b3ae41827cc069f1bec23c32aff04f" name="ceph-mgr" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="0c4fe346591eddff72637b756b83566826f5ec088d71dadd34d808ac26efe339" name="ceph-mgr" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="6d833a3f65367a64d4cd8be3631e1e1ab87fdc2109a6ce8390fecacd71dd336e" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="600815c8d67b8e2363f45d66368fbc6c5b8731c777634ac3a89c921a58f24afe" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="b78c747df51d3d0d84a2d2d1a32ac8056fc708825048331ab13b7ba21a776916" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="9b8221553553ebbdb5f87f44b3b10c71cdc15cd905ecce4d249928760de1e6f8" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="9002de77a75e0b8d879e29f09d61cb3e6828f8116a310075d14af2336ccdc5c2" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="e49cc67a503dd82505a59e5cc896bfbf06491b4bd59b961ebb4363f300f80b0f" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="442dc850516470ad7f576586d14424f1e9b2d87a6a1bb0bd30fe1bd879c7b573" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="647c244db2d3f97334de8728cbc64b2eff85cd332a7bbfc2890f0ca6675a7e73" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="c1b055a134012ebc61f8e54f34957ac7ef36567c7af6922dd89c423cab7e8832" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="e304a9a879a43ef5aeaa795a760ac7b0a60f1f21009981880ed10c93ef4e7cfd" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="ca821b9cef06083d8b08f81edc25c5a1c477e2676bbd334dc87e99eda629e8de" name="ceph-mgr-rook" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="7fa57c9eb305132bc4b8def79580fb074c5ff949c9f61097ef8061c247eec2bc" name="ceph-mgr-rook" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="14d4ed236b6e5e82b3d721dabac75b5959764a1817f77b1c9c47e4102c5dbd3a" name="ceph-mon" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="c2e2ea15c30aa17d09da99f96f49cc8ef6fbdb9f20d98ad14b71c71b07e1f8c1" name="ceph-mon" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="8ff8bee128009ebf3072e1b075ee4eaf439484f96524e2ab6d3cb231fcd124fe" name="ceph-osd" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="3b5d65c19b0576e73880f0058b56ac99293ba561bbe4df7bb8e03895ebaef466" name="ceph-osd" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="40997f06085d3d518843059fc07ac910aa041f8f72c5b550fd4194807fe24f89" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="cbfd96c4f252772a92b51439a5eb9059090996318e66bb4f96a845d4404c3c88" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="e1988a970134fc4e6efff8ed93932eeb5e70d05900446b2152847b03db65270c" name="ceph-radosgw" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="1cd6df8ea96ecf2187a35afaec0076cebb5c1f04d6726ba50a66a072e9c3cfdc" name="ceph-radosgw" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="681090d0e0ee1546791fa14de7c20052b5f3ad31ae158cfba421af92b3aee286" name="ceph-resource-agents" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="ef76ba44acc630e7f68565c31d2f758f44627627e5a9496cf15077d2e582b24b" name="ceph-resource-agents" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="01739cd2e91884a4201524c9e56e6bc8fff13cc56fc28edb67d2003a709aaf73" name="ceph-selinux" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="18f0299352e7f4701f4d7f5c45e2c8d51958b561bd11800e784a03c625f04c7e" name="ceph-selinux" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="0f9c193628fde91cd684b5378a6aae49d83a4dd87b09bb344ec9f078ed930f57" name="ceph-test" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="1ca5cc3ac7b06306839da3604e75186f074d53851a3d0f235f5bf9c3c8981433" name="ceph-test" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="f5cea81180a2f43b4b04edbf0f4606db7be518e80a1524042303d5a7d7d38124" name="cephadm" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="e5a83bd8f731b2b35a2f87878d0e59cf2200a3702418d076b2ddc829d327f2b9" name="cephadm" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="3779ca2e7f8afcfa47d71ce354e462d1ece208371ac02a726542faf646e58b9e" name="cephfs-mirror" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="1c4cf25fa56e79c87bd8e4c22d29ee7f3de774e1dd9a998052f411c660f29cc8" name="cephfs-mirror" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="292c7b74c792ce050b20137cd79dfbebadf570ef866d967252ee4936ce81ef9a" name="cephfs-top" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="55e17e96784a81a68845d551e2d98ce0d002fa76bc3ddaeed218f5f40d225b5f" name="cephfs-top" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="c94b6ded914df59d139c9e0cb850818632db214361141d8e502741cdbd535eee" name="cfitsio" arch="x86_64">
  <version epoch="0" ver="3.490" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.490-1" date="1644408000">- Upgrade cfitsio to 3.490 to fix CVE-2018-3848,CVE-2018-3849</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -3.490-2" date="1661342400">- Remove rpath</changelog>
</package>
<package pkgid="1e805dc8fccfed5ffb4261f345bc50295815e581016806163251838773462b92" name="cfitsio-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.490" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.490-1" date="1644408000">- Upgrade cfitsio to 3.490 to fix CVE-2018-3848,CVE-2018-3849</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -3.490-2" date="1661342400">- Remove rpath</changelog>
</package>
<package pkgid="30e3f223baeee11e359c30bff9983d67656668b9716ace8f6dee4a5000e6f6d8" name="cfitsio-debugsource" arch="x86_64">
  <version epoch="0" ver="3.490" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.490-1" date="1644408000">- Upgrade cfitsio to 3.490 to fix CVE-2018-3848,CVE-2018-3849</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -3.490-2" date="1661342400">- Remove rpath</changelog>
</package>
<package pkgid="9a0a1342d476a040f5fb22d69648ef7d2eacc4b02c0086fb6d8abcaf41bc39cb" name="cfitsio-devel" arch="x86_64">
  <version epoch="0" ver="3.490" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.490-1" date="1644408000">- Upgrade cfitsio to 3.490 to fix CVE-2018-3848,CVE-2018-3849</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -3.490-2" date="1661342400">- Remove rpath</changelog>
</package>
<package pkgid="6944e38ce0bbc0a8c88117d8ca7998e3c4faffc2d601b88ebe054d09c10da045" name="cfitsio-help" arch="noarch">
  <version epoch="0" ver="3.490" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.490-1" date="1644408000">- Upgrade cfitsio to 3.490 to fix CVE-2018-3848,CVE-2018-3849</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -3.490-2" date="1661342400">- Remove rpath</changelog>
</package>
<package pkgid="5a69c69232bce46fdc0b629950f8030e2bccd03d2d437a7ca649a5f6d96a77c5" name="chrony" arch="x86_64">
  <version epoch="0" ver="4.1" rel="6.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-2" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:client rework command and limit the length of command</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 4.1-3" date="1671796800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix chrony to synchronize system clock</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-4" date="1672228800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update the patching mode</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-5" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for enable NTS</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.1-6" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add loongarch64 support</changelog>
</package>
<package pkgid="f68aa0622b31c2aeec97a33eda2695d75c438e1721e9db683647db47746a7d9e" name="chrony-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1" rel="6.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-2" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:client rework command and limit the length of command</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 4.1-3" date="1671796800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix chrony to synchronize system clock</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-4" date="1672228800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update the patching mode</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-5" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for enable NTS</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.1-6" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add loongarch64 support</changelog>
</package>
<package pkgid="f161bf241558a3671e58a874a77c267b3aec823233de87e189a7c7d2b7d0bd88" name="chrony-debugsource" arch="x86_64">
  <version epoch="0" ver="4.1" rel="6.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-2" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:client rework command and limit the length of command</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 4.1-3" date="1671796800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix chrony to synchronize system clock</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-4" date="1672228800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update the patching mode</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-5" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for enable NTS</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.1-6" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add loongarch64 support</changelog>
</package>
<package pkgid="7a0f9b2e6802ee9c89e08dbfa433854e7936518a29579ae044339cf0d1a3de98" name="chrony-help" arch="noarch">
  <version epoch="0" ver="4.1" rel="6.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-2" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:client rework command and limit the length of command</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 4.1-3" date="1671796800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix chrony to synchronize system clock</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-4" date="1672228800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update the patching mode</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-5" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for enable NTS</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.1-6" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add loongarch64 support</changelog>
</package>
<package pkgid="56e07453ff77ba3252677d68bb5886b5ff5327dfdf24f905715ce44303816e22" name="cjose" arch="x86_64">
  <version epoch="0" ver="0.6.2.2" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.6.2.2-1" date="1690200000">- Update to 0.6.2.2 for fix CVE-2023-37464</changelog>
</package>
<package pkgid="f374ef88d6964d5da5bca8d3fdb7d9be4327e3b47a22c798ccac8d7535a0b87b" name="cjose-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.6.2.2" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.6.2.2-1" date="1690200000">- Update to 0.6.2.2 for fix CVE-2023-37464</changelog>
</package>
<package pkgid="506c7b98262b0a832ce0ffd5255dfbdbef42b9d40d88b53c750040d39e7e477c" name="cjose-debugsource" arch="x86_64">
  <version epoch="0" ver="0.6.2.2" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.6.2.2-1" date="1690200000">- Update to 0.6.2.2 for fix CVE-2023-37464</changelog>
</package>
<package pkgid="f1bdb42d9858a26d55a8dc6554212fc05989c20258e57d2b17a83c2f17e6bbaf" name="cjose-devel" arch="x86_64">
  <version epoch="0" ver="0.6.2.2" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.6.2.2-1" date="1690200000">- Update to 0.6.2.2 for fix CVE-2023-37464</changelog>
</package>
<package pkgid="c2f1928dea23d579203abb7174da369f558236a6ea16c42f3cf3e1c6870e41b6" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="41fa478275d9b8bb779a91fdb0f64b0d8089be6915262810abd08fdcdf7f2975" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="701ac422a0608b110fe2b4da5f298d7c582bd52a64cea60c7f1ffb4843e7e0f7" name="clamav-data" arch="noarch">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="2956fddc6055e9dd8468f1f5574ed868b1317f4645805e3aaadd7b5d6669d4e5" name="clamav-data" arch="noarch">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="8bbfd4323f967dec5e9be1b9b2fb15623dd97b1909d470df17423733f0aff457" name="clamav-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="33aa6bbcd04ada5f6134e539968cf6af65bd487b4f710a7f03b6f49c5fa496fd" name="clamav-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="84c0df7358342933ca6ea3c27706d76fa80609a69bce77f294cd032584037658" name="clamav-debugsource" arch="x86_64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="48f0b66031bbe1ef034daa4d7259499061152d26825dfa981c7904619f58be73" name="clamav-debugsource" arch="x86_64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="3830fba7bb79342ca0bd61e179bf89eee2e85592963c386dc622e715229e2d5b" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="14a2746a42e00c47498cad1bd8e344625790081de78d9bb56525a0e3d945079b" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="c02abcdf9ba13e9dceb1532a2a6c1ee11600ffc17ef62ad798bd70807ae9a522" name="clamav-filesystem" arch="noarch">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="e3424fe8f9bfa42b8f8f7d4c7523fe4d7c3951b93becb0d670f69082ac6df398" name="clamav-filesystem" arch="noarch">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="a67b85005e02d5442461a6c9f357f1f8fa460364c4cb454fbbbff0c8a74d9b2a" name="clamav-help" arch="x86_64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="62781875207084b627f6a433070cf9292fb4f72b85d48a44bec83a83f745f1c8" name="clamav-help" arch="x86_64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="054d8e09044d7284dcc2e2df2211abcb7b3701b200ec895dcf3ea2dfa744734e" name="clamav-milter" arch="x86_64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="4499739fdab08d36fcc6357574c3e773684ef6de8cb5e917e71f31d2c17804eb" name="clamav-milter" arch="x86_64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="45e126a874c88323409d0d7b139c7d7aebaa95d58bd2c510ae9a65d212de952c" name="clamav-update" arch="x86_64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="1a04f3e4ffc8d1fb0e1ea07d3797d96a2db60190747c1ebb7f422033b3823090" name="clamav-update" arch="x86_64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="1f0d339c5464e09ab5708d028c895bcd7c2ec7ce97b739c593af9cc8fabd978c" name="clamd" arch="x86_64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="1062d89b34431441546c729a208ae93bbbe1d8e96d430bc74f87785de1cfbcc7" name="clamd" arch="x86_64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="bc80d197cf3c4731278781a5baa14a65640375628248b1a11d5411f6d97ffd9a" name="clang" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="2191dc56cc72fd9518c7a377531da34666a32bac4d919db4a3755bfe921cb1c1" name="clang-analyzer" arch="noarch">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="cfa9fddfe51051b3981245e16d9a7b6018b08581b0e652e42918fae1728705de" name="clang-debuginfo" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="445d927df57d10e7070fbf172319721986f0d6b54c4e5c475c7de84ec024a4b8" name="clang-debugsource" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="702d50f085878b3de01d5655e92ca579619f478129d374df98f4702d61021b2a" name="clang-devel" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="0a5b6bb87c26c3505c65da0ba9d4b6bfec248537b2d313550530456d7e9bf8ab" name="clang-help" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="036eb476d2cf64b4b127768b038ce4ed241ba3f0f5d2e31ce5723c937139846a" name="clang-resource-filesystem" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="7da3e7de6cee82362ba8fcc3843cea28144f9e408f6a1a15f8ae469fdaa6fce9" name="clang-tools-extra" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="d40085e00d403d99d549db652228a91df87a3bda745a36fa1c5d28093833dfa8" name="clibcni" arch="x86_64">
  <version epoch="0" ver="2.0.7" rel="8.oe2203sp1"/>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-6" date="1641816000">- Type: adapt to new gmock
- ID: NA
- SUG: NA
- DESC: add gmock build requires</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-7" date="1641816001">- Type: sync patch from upstream
- ID: NA
- SUG: NA
- DESC: sync from openeuler</changelog>
  <changelog author="wangfengtu &lt;wangfengtu@huawei.com&gt; - 2.0.7-1" date="1645704000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: update to version v2.0.7</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.7-2" date="1654171200">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: remove rpath by cmake</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.7-3" date="1666094400">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: add required package lcr lower and upper version</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.7-4" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.7-5" date="1671624000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 2.0.7-6" date="1683892800">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add loongarch64 architecture</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-7" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error and empty pointer reference</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-8" date="1695124800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:report low error of call cni plugin</changelog>
</package>
<package pkgid="4e505f0295bc0636b571bbf2444f870f829e77824b96cae014f3eac22bdce813" name="clibcni-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.7" rel="8.oe2203sp1"/>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-6" date="1641816000">- Type: adapt to new gmock
- ID: NA
- SUG: NA
- DESC: add gmock build requires</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-7" date="1641816001">- Type: sync patch from upstream
- ID: NA
- SUG: NA
- DESC: sync from openeuler</changelog>
  <changelog author="wangfengtu &lt;wangfengtu@huawei.com&gt; - 2.0.7-1" date="1645704000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: update to version v2.0.7</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.7-2" date="1654171200">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: remove rpath by cmake</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.7-3" date="1666094400">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: add required package lcr lower and upper version</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.7-4" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.7-5" date="1671624000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 2.0.7-6" date="1683892800">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add loongarch64 architecture</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-7" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error and empty pointer reference</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-8" date="1695124800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:report low error of call cni plugin</changelog>
</package>
<package pkgid="5946620b92d107206626efd2a9eeb9ad40ae74396b33beef3242b62375dac6eb" name="clibcni-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.7" rel="8.oe2203sp1"/>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-6" date="1641816000">- Type: adapt to new gmock
- ID: NA
- SUG: NA
- DESC: add gmock build requires</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-7" date="1641816001">- Type: sync patch from upstream
- ID: NA
- SUG: NA
- DESC: sync from openeuler</changelog>
  <changelog author="wangfengtu &lt;wangfengtu@huawei.com&gt; - 2.0.7-1" date="1645704000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: update to version v2.0.7</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.7-2" date="1654171200">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: remove rpath by cmake</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.7-3" date="1666094400">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: add required package lcr lower and upper version</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.7-4" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.7-5" date="1671624000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 2.0.7-6" date="1683892800">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add loongarch64 architecture</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-7" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error and empty pointer reference</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-8" date="1695124800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:report low error of call cni plugin</changelog>
</package>
<package pkgid="b61519d7765881b7cd1f56a3c9e883967db66369a9425d99bfcb912229f8245a" name="clibcni-devel" arch="x86_64">
  <version epoch="0" ver="2.0.7" rel="8.oe2203sp1"/>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-6" date="1641816000">- Type: adapt to new gmock
- ID: NA
- SUG: NA
- DESC: add gmock build requires</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-7" date="1641816001">- Type: sync patch from upstream
- ID: NA
- SUG: NA
- DESC: sync from openeuler</changelog>
  <changelog author="wangfengtu &lt;wangfengtu@huawei.com&gt; - 2.0.7-1" date="1645704000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: update to version v2.0.7</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.7-2" date="1654171200">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: remove rpath by cmake</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.7-3" date="1666094400">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: add required package lcr lower and upper version</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.7-4" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.7-5" date="1671624000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 2.0.7-6" date="1683892800">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add loongarch64 architecture</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-7" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error and empty pointer reference</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-8" date="1695124800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:report low error of call cni plugin</changelog>
</package>
<package pkgid="e5510de35e0d667f20705fe9dc042f1b7e3177344233f73cfd3fcf8b8eb6a431" name="clippy" arch="x86_64">
  <version epoch="0" ver="1.60.0" rel="3.oe2203sp1"/>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.57.0-2" date="1664193600">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;wangkai@h-partners.com&gt; - 1.60.0-1" date="1680609600">- Update to 1.60.0</changelog>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.60.0-2" date="1681214400">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.60.0-3" date="1708171200">- Fix CVE-2024-24577</changelog>
</package>
<package pkgid="8ad824089ae522a2976d36dce548b6d600d5707018e4eb511732ff85f2c8919b" name="cloud-init" arch="noarch">
  <version epoch="0" ver="21.4" rel="14.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-5" date="1669809600">- rename patch</changelog>
  <changelog author="xuxinyu &lt;xuxinyu@xfusion.com&gt; - 21.4-6" date="1671537600">- Type:security
- CVE:
- DESC:delete "ALL=(ALL) NOPASSWD:ALL" in cloud.cfg.tmpl</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 21.4-7" date="1671624000">- make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-8" date="1672920000">- Limit permissions for /etc/network/50-cloud-init.yaml as read-only for root (600)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-9" date="1673006400">- Fix the distro.osfamily output problem</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-10" date="1675339200">- revert make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-11" date="1679918400">- keep custom strict perms when 50-cloud-init.yaml exists</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-12" date="1681387200">- Don't change permissions of netrules target</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-13" date="1682251200">- Fix a unitest error</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-14" date="1684065600">- fix CVE-2022-2084</changelog>
</package>
<package pkgid="12d9d105317d58053fbf3a730e5a59679615c713485ab2a5ccd1374e3b63a21a" name="cloud-init" arch="noarch">
  <version epoch="0" ver="21.4" rel="16.oe2203sp1"/>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 21.4-7" date="1671624000">- make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-8" date="1672920000">- Limit permissions for /etc/network/50-cloud-init.yaml as read-only for root (600)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-9" date="1673006400">- Fix the distro.osfamily output problem</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-10" date="1675339200">- revert make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-11" date="1679918400">- keep custom strict perms when 50-cloud-init.yaml exists</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-12" date="1681387200">- Don't change permissions of netrules target</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-13" date="1682251200">- Fix a unitest error</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-14" date="1684065600">- fix CVE-2022-2084</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-15" date="1684497600">- Cleanup ephemeral IP routes on exception and handle two different routes for the same ip</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-16" date="1684929600">- fix CVE-2023-1786</changelog>
</package>
<package pkgid="fe0c3a9dffb85b410b7b323eee5e2bda142831755427709c744fa941833eef06" name="cloud-init" arch="noarch">
  <version epoch="0" ver="21.4" rel="24.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-15" date="1684497600">- Cleanup ephemeral IP routes on exception and handle two different routes for the same ip</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-16" date="1684929600">- fix CVE-2023-1786</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 21.4-17" date="1690632000">- backport upstream patches:
https://github.com/canonical/cloud-init/commit/fa53c7f4086f5937bc9bd328dba9f91ca73b6614
https://github.com/canonical/cloud-init/commit/9c7502a801763520639c66125eb373123d1e4f44
https://github.com/canonical/cloud-init/commit/2e17a0d626d41147b7d0822013e80179b3a81ee4
https://github.com/canonical/cloud-init/commit/9f0efc474ea430c75cd0abec3e2da719d4934346
https://github.com/canonical/cloud-init/commit/bb414c7866c4728b2105e84f7b426ab81cc4bf4d
https://github.com/canonical/cloud-init/commit/9cbd94dd57112083856ead0e0ff724e9d1c1f714
https://github.com/canonical/cloud-init/commit/6d817e94beb404d3917bf973bcb728aa6cc22ffe
https://github.com/canonical/cloud-init/commit/0450a1faff9e5095e6da0865916501772b3972e9</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 21.4-18" date="1690632001">- backport upstream patches:
https://github.com/canonical/cloud-init/commit/7136109df5a7b3c75dfb05a853fc4485fed25b5f
https://github.com/canonical/cloud-init/commit/f51c352e6c6a7d05a61308c188450a1b818eac45
https://github.com/canonical/cloud-init/commit/668a68fe577368555ea7f71577fc352494a98c25</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-19" date="1692360000">- backport upstream patches</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-20" date="1692619200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Do not generate dsa and ed25519 key types when crypto FIPS mode is enabled
       Don't fail if IB and Ethernet devices 'collide'
       Fix default route rendering on v2 ipv6
       Fix IPv6 netmask format for sysconfig
       Fix KeyError when rendering sysconfig IPv6 routes
       Fix network v2 metric rendering
       Ignore duplicate macs from mscc_felix and fsl_enetc
       macs: ignore duplicate MAC for devs with driver driver qmi_wwan
       net/dhcp: catch dhclient failures and raise NoDHCPLeaseError
       net: skip duplicate mac check for netvsc nic and its VF
       Set ownership for new folders in Write Files Module
       cc_ubuntu_advantage: Redact token from logs
       Do not silently ignore integer uid
       Ensure network ready before cloud-init service runs
       Fix exception when no activator found
       Fix KeyError in iproute pformat
       Handle non existent ca-cert-config situation</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-21" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cc_mounts: Fix swapfile not working on btrfs
       cc_mounts: Use fallocate to create swapfile on btrfs
       collect-logs fix memory usage</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-22" date="1699358400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove test_net_freebsd</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-23" date="1699358401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not generate dsa</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-24" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Don't loosen the permissions of the log file</changelog>
</package>
<package pkgid="bdaf47613f86900f03af1f275e08acd7030ca071943d376214e5d9c27df1c065" name="cloud-init-help" arch="noarch">
  <version epoch="0" ver="21.4" rel="14.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-5" date="1669809600">- rename patch</changelog>
  <changelog author="xuxinyu &lt;xuxinyu@xfusion.com&gt; - 21.4-6" date="1671537600">- Type:security
- CVE:
- DESC:delete "ALL=(ALL) NOPASSWD:ALL" in cloud.cfg.tmpl</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 21.4-7" date="1671624000">- make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-8" date="1672920000">- Limit permissions for /etc/network/50-cloud-init.yaml as read-only for root (600)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-9" date="1673006400">- Fix the distro.osfamily output problem</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-10" date="1675339200">- revert make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-11" date="1679918400">- keep custom strict perms when 50-cloud-init.yaml exists</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-12" date="1681387200">- Don't change permissions of netrules target</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-13" date="1682251200">- Fix a unitest error</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-14" date="1684065600">- fix CVE-2022-2084</changelog>
</package>
<package pkgid="64c83457bc5ef3500bd3f79e93067f78ed12871c9127ec753855437c1573d16b" name="cloud-init-help" arch="noarch">
  <version epoch="0" ver="21.4" rel="16.oe2203sp1"/>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 21.4-7" date="1671624000">- make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-8" date="1672920000">- Limit permissions for /etc/network/50-cloud-init.yaml as read-only for root (600)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-9" date="1673006400">- Fix the distro.osfamily output problem</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-10" date="1675339200">- revert make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-11" date="1679918400">- keep custom strict perms when 50-cloud-init.yaml exists</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-12" date="1681387200">- Don't change permissions of netrules target</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-13" date="1682251200">- Fix a unitest error</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-14" date="1684065600">- fix CVE-2022-2084</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-15" date="1684497600">- Cleanup ephemeral IP routes on exception and handle two different routes for the same ip</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-16" date="1684929600">- fix CVE-2023-1786</changelog>
</package>
<package pkgid="3a6487aa03e2638015c704706b54fdbf723a6aae324295ec88e2adf7d0d8e8dc" name="cloud-init-help" arch="noarch">
  <version epoch="0" ver="21.4" rel="24.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-15" date="1684497600">- Cleanup ephemeral IP routes on exception and handle two different routes for the same ip</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-16" date="1684929600">- fix CVE-2023-1786</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 21.4-17" date="1690632000">- backport upstream patches:
https://github.com/canonical/cloud-init/commit/fa53c7f4086f5937bc9bd328dba9f91ca73b6614
https://github.com/canonical/cloud-init/commit/9c7502a801763520639c66125eb373123d1e4f44
https://github.com/canonical/cloud-init/commit/2e17a0d626d41147b7d0822013e80179b3a81ee4
https://github.com/canonical/cloud-init/commit/9f0efc474ea430c75cd0abec3e2da719d4934346
https://github.com/canonical/cloud-init/commit/bb414c7866c4728b2105e84f7b426ab81cc4bf4d
https://github.com/canonical/cloud-init/commit/9cbd94dd57112083856ead0e0ff724e9d1c1f714
https://github.com/canonical/cloud-init/commit/6d817e94beb404d3917bf973bcb728aa6cc22ffe
https://github.com/canonical/cloud-init/commit/0450a1faff9e5095e6da0865916501772b3972e9</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 21.4-18" date="1690632001">- backport upstream patches:
https://github.com/canonical/cloud-init/commit/7136109df5a7b3c75dfb05a853fc4485fed25b5f
https://github.com/canonical/cloud-init/commit/f51c352e6c6a7d05a61308c188450a1b818eac45
https://github.com/canonical/cloud-init/commit/668a68fe577368555ea7f71577fc352494a98c25</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-19" date="1692360000">- backport upstream patches</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-20" date="1692619200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Do not generate dsa and ed25519 key types when crypto FIPS mode is enabled
       Don't fail if IB and Ethernet devices 'collide'
       Fix default route rendering on v2 ipv6
       Fix IPv6 netmask format for sysconfig
       Fix KeyError when rendering sysconfig IPv6 routes
       Fix network v2 metric rendering
       Ignore duplicate macs from mscc_felix and fsl_enetc
       macs: ignore duplicate MAC for devs with driver driver qmi_wwan
       net/dhcp: catch dhclient failures and raise NoDHCPLeaseError
       net: skip duplicate mac check for netvsc nic and its VF
       Set ownership for new folders in Write Files Module
       cc_ubuntu_advantage: Redact token from logs
       Do not silently ignore integer uid
       Ensure network ready before cloud-init service runs
       Fix exception when no activator found
       Fix KeyError in iproute pformat
       Handle non existent ca-cert-config situation</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-21" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cc_mounts: Fix swapfile not working on btrfs
       cc_mounts: Use fallocate to create swapfile on btrfs
       collect-logs fix memory usage</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-22" date="1699358400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove test_net_freebsd</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-23" date="1699358401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not generate dsa</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-24" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Don't loosen the permissions of the log file</changelog>
</package>
<package pkgid="342b4a0d8115eec90194652cb9f96d2595de5ed8d9f4584e8ba9a94c0695a015" name="cmake" arch="x86_64">
  <version epoch="0" ver="3.22.0" rel="8.oe2203sp1"/>
  <changelog author="wangchen &lt;wangchen137@h-partners.com&gt; - 3.22.0-4" date="1646222400">- Remove rhash-devel from BuildRequires</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.22.0-5" date="1666180800">- add sw64 patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 3.22.0-6" date="1691668800">- fix sw_64 portmidi Could NOT find JNI</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-7" date="1702555200">- Fix abnormal empty link in cmake-data package</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-8" date="1706875200">- Remove Windows_TemporaryKey.pfx</changelog>
</package>
<package pkgid="d7774c85ad360c3bf02e0c2ab99100bf893a504787f8260459677306ade01e17" name="cmake-data" arch="noarch">
  <version epoch="0" ver="3.22.0" rel="8.oe2203sp1"/>
  <changelog author="wangchen &lt;wangchen137@h-partners.com&gt; - 3.22.0-4" date="1646222400">- Remove rhash-devel from BuildRequires</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.22.0-5" date="1666180800">- add sw64 patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 3.22.0-6" date="1691668800">- fix sw_64 portmidi Could NOT find JNI</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-7" date="1702555200">- Fix abnormal empty link in cmake-data package</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-8" date="1706875200">- Remove Windows_TemporaryKey.pfx</changelog>
</package>
<package pkgid="f70215df34ad670081d4a448d178370e0b58b6599dacf759c46eda2db029eb49" name="cmake-filesystem" arch="x86_64">
  <version epoch="0" ver="3.22.0" rel="8.oe2203sp1"/>
  <changelog author="wangchen &lt;wangchen137@h-partners.com&gt; - 3.22.0-4" date="1646222400">- Remove rhash-devel from BuildRequires</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.22.0-5" date="1666180800">- add sw64 patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 3.22.0-6" date="1691668800">- fix sw_64 portmidi Could NOT find JNI</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-7" date="1702555200">- Fix abnormal empty link in cmake-data package</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-8" date="1706875200">- Remove Windows_TemporaryKey.pfx</changelog>
</package>
<package pkgid="616050748ac2aa4deb5605e627a99b2dd5404f5cbef4e944570f93e824e06cb7" name="cmake-gui" arch="x86_64">
  <version epoch="0" ver="3.22.0" rel="8.oe2203sp1"/>
  <changelog author="wangchen &lt;wangchen137@h-partners.com&gt; - 3.22.0-4" date="1646222400">- Remove rhash-devel from BuildRequires</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.22.0-5" date="1666180800">- add sw64 patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 3.22.0-6" date="1691668800">- fix sw_64 portmidi Could NOT find JNI</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-7" date="1702555200">- Fix abnormal empty link in cmake-data package</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-8" date="1706875200">- Remove Windows_TemporaryKey.pfx</changelog>
</package>
<package pkgid="ae9a977967cc78abd3dbe427601e588d75e80e91d7bc1a82724c2972f76b79be" name="cmake-help" arch="noarch">
  <version epoch="0" ver="3.22.0" rel="8.oe2203sp1"/>
  <changelog author="wangchen &lt;wangchen137@h-partners.com&gt; - 3.22.0-4" date="1646222400">- Remove rhash-devel from BuildRequires</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.22.0-5" date="1666180800">- add sw64 patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 3.22.0-6" date="1691668800">- fix sw_64 portmidi Could NOT find JNI</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-7" date="1702555200">- Fix abnormal empty link in cmake-data package</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-8" date="1706875200">- Remove Windows_TemporaryKey.pfx</changelog>
</package>
<package pkgid="730b010877fbfaa7988a238e19195d7e16b6b1b70dbe8fddf832a15f1a8234f5" name="cmake-rpm-macros" arch="noarch">
  <version epoch="0" ver="3.22.0" rel="8.oe2203sp1"/>
  <changelog author="wangchen &lt;wangchen137@h-partners.com&gt; - 3.22.0-4" date="1646222400">- Remove rhash-devel from BuildRequires</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.22.0-5" date="1666180800">- add sw64 patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 3.22.0-6" date="1691668800">- fix sw_64 portmidi Could NOT find JNI</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-7" date="1702555200">- Fix abnormal empty link in cmake-data package</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-8" date="1706875200">- Remove Windows_TemporaryKey.pfx</changelog>
</package>
<package pkgid="88b2b99e176ba5c9c6f1608b0ae0948ccab7de18ff73e5146122dc61e7452964" name="cockpit" arch="x86_64">
  <version epoch="0" ver="178" rel="13.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-9" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-10" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="wangkerong &lt;wangkerong&gt; - 178-11" date="1632484800">- Type:CVE
- Id:CVE-2021-3660
- SUG:NA
- DESC:fix cve-2021-3660</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
</package>
<package pkgid="fcf181a5fd54c5cb7ec91caf0e947c1ee0d5bdea1ea8672006c33c2a889ca631" name="cockpit" arch="x86_64">
  <version epoch="0" ver="178" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
</package>
<package pkgid="8326c6b920e104b0d0cb741095fb571d79c3580558001768d90079f173b7695d" name="cockpit" arch="x86_64">
  <version epoch="0" ver="178" rel="15.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
</package>
<package pkgid="565bcae7e9df672233d88fd8aedcc326f337bc7676ca85873b5f372bf378f337" name="cockpit-389-ds" arch="noarch">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="bca7d1af5cee1d219e88d18c397ae42767851638aa255da6ba9ca0c53159cf93" name="cockpit-389-ds" arch="noarch">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="f94f441b841dcbd60ed970bf6e4dcddc3a6dfc473238843b67ee287ee91f7b5c" name="cockpit-389-ds" arch="noarch">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="5dc7a4af33b6d12a2e9540cd8b63fe85be977f3c7bcdc04d628d59d6fb380adf" name="cockpit-cockpit-machines" arch="noarch">
  <version epoch="0" ver="178" rel="13.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-9" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-10" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="wangkerong &lt;wangkerong&gt; - 178-11" date="1632484800">- Type:CVE
- Id:CVE-2021-3660
- SUG:NA
- DESC:fix cve-2021-3660</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
</package>
<package pkgid="2470df786fa77b5049355d64ad933ac76c24534175c342200b03d8513a12b57c" name="cockpit-cockpit-machines" arch="noarch">
  <version epoch="0" ver="178" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
</package>
<package pkgid="052121f53d8fcd4cf66139b046cd21ee1f208a7bf9520178851be4830599836f" name="cockpit-cockpit-machines" arch="noarch">
  <version epoch="0" ver="178" rel="15.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
</package>
<package pkgid="204acc72344b4f9dd6ecd4b3d98674df0a3b54a886f77a85e13e04401e6ed16c" name="cockpit-cockpit-machines-ovirt" arch="noarch">
  <version epoch="0" ver="178" rel="13.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-9" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-10" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="wangkerong &lt;wangkerong&gt; - 178-11" date="1632484800">- Type:CVE
- Id:CVE-2021-3660
- SUG:NA
- DESC:fix cve-2021-3660</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
</package>
<package pkgid="533b466ef357f39a12cc48af697f5947bac54fc0f670576b96b69483e6101312" name="cockpit-cockpit-machines-ovirt" arch="noarch">
  <version epoch="0" ver="178" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
</package>
<package pkgid="8c885ab3d2e800e68df66715a4fb54a8d1dae0728aa202f0d216ed14836c1595" name="cockpit-cockpit-machines-ovirt" arch="noarch">
  <version epoch="0" ver="178" rel="15.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
</package>
<package pkgid="5ff0b7b22f9fe2d14fac26692826a8d9426eea1525916bed786ba9405149a7ac" name="cockpit-debuginfo" arch="x86_64">
  <version epoch="0" ver="178" rel="13.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-9" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-10" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="wangkerong &lt;wangkerong&gt; - 178-11" date="1632484800">- Type:CVE
- Id:CVE-2021-3660
- SUG:NA
- DESC:fix cve-2021-3660</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
</package>
<package pkgid="7fb74d8801df00aac07b86df2f5175ebe8c66e1c4f91d24615d4a55a4893a8c7" name="cockpit-debuginfo" arch="x86_64">
  <version epoch="0" ver="178" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
</package>
<package pkgid="bb50be8d441ea0923e734375c4802232c51a9370580fb352a7a2575826e0006d" name="cockpit-debuginfo" arch="x86_64">
  <version epoch="0" ver="178" rel="15.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
</package>
<package pkgid="a1bc6db8e53c8339a10f2de85bf173219ae0b2acbc718052dff248a6be0d78e4" name="cockpit-debugsource" arch="x86_64">
  <version epoch="0" ver="178" rel="13.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-9" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-10" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="wangkerong &lt;wangkerong&gt; - 178-11" date="1632484800">- Type:CVE
- Id:CVE-2021-3660
- SUG:NA
- DESC:fix cve-2021-3660</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
</package>
<package pkgid="f90d098ccb4a27fe6a7dc6f08e76f07c8f78d7eb738bd06b7f0b2c1ee3db3ab9" name="cockpit-debugsource" arch="x86_64">
  <version epoch="0" ver="178" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
</package>
<package pkgid="7f4c368654a227daec822296a07f6a023993d5c2c53c440b9b98b5c29ba41aa2" name="cockpit-debugsource" arch="x86_64">
  <version epoch="0" ver="178" rel="15.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
</package>
<package pkgid="550fd556e8f1615d8ad4addd90f79cd7decaf441d319e16b7b3c7146601a3b2e" name="cockpit-devel" arch="x86_64">
  <version epoch="0" ver="178" rel="13.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-9" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-10" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="wangkerong &lt;wangkerong&gt; - 178-11" date="1632484800">- Type:CVE
- Id:CVE-2021-3660
- SUG:NA
- DESC:fix cve-2021-3660</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
</package>
<package pkgid="ddc8c8bee342d408ffa0c8578e31170e3f8bb7c7ed6fceb24205060f6882045d" name="cockpit-devel" arch="x86_64">
  <version epoch="0" ver="178" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
</package>
<package pkgid="f4e3be9a73c88c922b6407480e841048895d4946f4d28dada6c8aabf7dd44113" name="cockpit-devel" arch="x86_64">
  <version epoch="0" ver="178" rel="15.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
</package>
<package pkgid="b54ed7d1b54ee90117480e8e26990e0f462aa891dd6df97e822458aaabc6c978" name="cockpit-help" arch="noarch">
  <version epoch="0" ver="178" rel="13.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-9" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-10" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="wangkerong &lt;wangkerong&gt; - 178-11" date="1632484800">- Type:CVE
- Id:CVE-2021-3660
- SUG:NA
- DESC:fix cve-2021-3660</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
</package>
<package pkgid="29fe08d51422b83b23f34cdbae8325d2ff3cb1e64cf65f06e1384ca8ce8354a5" name="cockpit-help" arch="noarch">
  <version epoch="0" ver="178" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
</package>
<package pkgid="9ecc47e03bca350f000aacf210edddb0849a2447eea8df75302f1acd267daa7b" name="cockpit-help" arch="noarch">
  <version epoch="0" ver="178" rel="15.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
</package>
<package pkgid="817ba50626b04c837db35298338acbc8a5223f29177272d81c1f01d9b22a1daf" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="309.oe2203sp1"/>
  <changelog author="songyanting&lt;songyanting@huawei.com&gt; - 1.2.0-300" date="1642852800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync bugfix, include
       1. add check in spec
       2. kill container init process if runc start returns error
       3. fix containerd-shim residual when kill containerd durin
       4. fix deadlock on commit error
       5. backport upstream &amp; ttrpc patches
       6. fix exec event missing due to pid reuse
       7. fix dm left when pause container and kill shim
       8. add CGO security build options
       9. fix start container failed with id exists
      10. drop opt package
      11. fix race access for mobySubscribed
      12. improve log for debugging
      13. reduce permission for bundle dir
      14. fix publish command wait block forever</changelog>
  <changelog author="Vanient&lt;xiadanni1@huawei.com&gt; - 1.2.0-301" date="1652184000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648</changelog>
  <changelog author="zhangsong234&lt;zhangsong34@huawei.com&gt; - 1.2.0-302" date="1655899200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:put get pid lock after set process exited to avoid deadlock</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-303" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Limit the response size of ExecSync to fix CVE-2022-31030</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-304" date="1663848000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: bugfix and add CGO security build option</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-305" date="1668600000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix version number wrong</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-306" date="1668600001">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add ctr binary into package</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-307" date="1670932800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Fix goroutine leak in Exec</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-308" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix k8s build fail without import context</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-309" date="1677499200">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-25153 and CVE-2023-25173</changelog>
</package>
<package pkgid="844da494c53a487a4e0542e930337ec5ea7b417eb1b68065586713401cc4ff6d" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="316.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-307" date="1670932800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Fix goroutine leak in Exec</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-308" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix k8s build fail without import context</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-309" date="1677499200">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-25153 and CVE-2023-25173</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.2.0-310" date="1681819200">- Sync 2203 loongarch support for containerd patch file</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-311" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix journald stop container shim log stuck bug</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.2.0-312" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-313" date="1695124800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-314" date="1699444800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-315" date="1703160000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-316" date="1706616000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
</package>
<package pkgid="e4bc32b1cca46a1d04cb7a26ee2cf574da9ae35a144fbd5d09cd8b249313da5c" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="317.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-308" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix k8s build fail without import context</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-309" date="1677499200">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-25153 and CVE-2023-25173</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.2.0-310" date="1681819200">- Sync 2203 loongarch support for containerd patch file</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-311" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix journald stop container shim log stuck bug</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.2.0-312" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-313" date="1695124800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-314" date="1699444800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-315" date="1703160000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-316" date="1706616000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-317" date="1707220800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update vendored golang.org/x/net</changelog>
</package>
<package pkgid="337f1ff647610bf56721ecb4354fd00871774a8b57f2b4328782fd0245c2da94" name="containernetworking-plugins" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 1.0.1-2" date="1641816000">- drop deps for golang packages due to vendor has everything</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.1.1-1" date="1658318400">- update to version 1.1.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.1.1-2" date="1675944000">- Add PIE,BIND_NOW,RELRO,STRIP secure compilation options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.1.1-3" date="1691668800">- Type:sync
- ID:NA
- SUG:NA
- DESC: Add support for sw_64 and loongarch64.</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.1.1-4" date="1703764800">- Rebuild for golang cves: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537 and CVE-2023-24538</changelog>
</package>
<package pkgid="630606cc489a702085fddaf388aa3f09cb21ca7dbc7674ed61f9e0e307017aaa" name="containernetworking-plugins-devel" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 1.0.1-2" date="1641816000">- drop deps for golang packages due to vendor has everything</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.1.1-1" date="1658318400">- update to version 1.1.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.1.1-2" date="1675944000">- Add PIE,BIND_NOW,RELRO,STRIP secure compilation options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.1.1-3" date="1691668800">- Type:sync
- ID:NA
- SUG:NA
- DESC: Add support for sw_64 and loongarch64.</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.1.1-4" date="1703764800">- Rebuild for golang cves: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537 and CVE-2023-24538</changelog>
</package>
<package pkgid="04d63b99c055ad0d4a9331cdfa0f80dee2d120c435d332457049c702ff6d6221" name="containernetworking-plugins-unit-test-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 1.0.1-2" date="1641816000">- drop deps for golang packages due to vendor has everything</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.1.1-1" date="1658318400">- update to version 1.1.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.1.1-2" date="1675944000">- Add PIE,BIND_NOW,RELRO,STRIP secure compilation options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.1.1-3" date="1691668800">- Type:sync
- ID:NA
- SUG:NA
- DESC: Add support for sw_64 and loongarch64.</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.1.1-4" date="1703764800">- Rebuild for golang cves: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537 and CVE-2023-24538</changelog>
</package>
<package pkgid="cebb77d0450978f9a13d989bdc816bcb4204ec09ca74430c287c0ad29598f959" name="containers-common" arch="x86_64">
  <version epoch="1" ver="1.5.2" rel="3.oe2203sp1"/>
  <changelog author="haozi007&lt;liuhao27@huawei.com&gt; - 1.1.0-7.dev.git63085f5" date="1637841600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:install registries.conf for skopeo</changelog>
  <changelog author="haozi007&lt;liuhao27@huawei.com&gt; - 1.1.0-7.dev.git63085f5" date="1638187200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:udpate skopeo to 1.5.2</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1:1.8.0-1" date="1667822400">- update to 1.8.0</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1:1.5.2-1" date="1671710400">- rollback to 1.5.2</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 1:1.5.2-2" date="1691755200">- add loongarch64 and sw_64 support</changelog>
  <changelog author="lijian&lt;lijian2@kylinos.cn&gt; - 1:1.5.2-3" date="1694692800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
</package>
<package pkgid="21e4f1a64e338c537543cba02f6cae1a3afa25651c29398b0978c2c02f5c5fb6" name="containers-common" arch="x86_64">
  <version epoch="1" ver="1.5.2" rel="7.oe2203sp1"/>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1:1.8.0-1" date="1667822400">- update to 1.8.0</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1:1.5.2-1" date="1671710400">- rollback to 1.5.2</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 1:1.5.2-2" date="1691755200">- add loongarch64 and sw_64 support</changelog>
  <changelog author="lijian&lt;lijian2@kylinos.cn&gt; - 1:1.5.2-3" date="1694692800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="liukuo&lt;liukuo@kylinos.cn&gt; - 1:1.5.2-4" date="1708516800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rebuild for golang cvefix: CVE-2022-41723,CVE-2023-29406,CVE-2023-39326</changelog>
  <changelog author="lijian &lt;lijian2@kylinos.cn&gt; -1:1.5.2-5" date="1715428800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-41723</changelog>
  <changelog author="lijian &lt;lijian2@kylinos.cn&gt; - 1:1.5.2-6" date="1715428801">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix CVE-2024-28180</changelog>
  <changelog author="lijian &lt;lijian2@kylinos.cn&gt; - 1:1.5.2-7" date="1715428802">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix CVE-2023-29406</changelog>
</package>
<package pkgid="d9f7cbb9eb6164fc690a6d559d28137542f3c11fc30eb970b0ecfd89e6f023b6" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.13" rel="10.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-9" date="1687262400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert fix CVE-2015-1197 because it causes AT testcases problems</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 2.13-10" date="1693396800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches</changelog>
</package>
<package pkgid="2498275065ada00940f85f5833d8cb2bd48defb19778eec510cd4304659eb5f6" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.13" rel="8.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.13-4" date="1622808000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add 'autoconf automake' to BuildRequires to use autoreconf command</changelog>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 2.13-5" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Solve mutiple definition compilation error</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 2.13-6" date="1629806400">- Type:CVE
- ID:CVE-2021-38185
- SUG:NA
- DESC:Fix CVE-2021-38185</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
</package>
<package pkgid="edecebbdc8dd7c70596e5e951bc711c4f25027b8f3e9d81e89fb44532cd4e760" name="cpio-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.13" rel="10.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-9" date="1687262400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert fix CVE-2015-1197 because it causes AT testcases problems</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 2.13-10" date="1693396800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches</changelog>
</package>
<package pkgid="7d87781f822838ff8f97ef0fa11918d3588a3cfe6acb3ad24ce1c20ded45b9e7" name="cpio-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.13" rel="8.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.13-4" date="1622808000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add 'autoconf automake' to BuildRequires to use autoreconf command</changelog>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 2.13-5" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Solve mutiple definition compilation error</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 2.13-6" date="1629806400">- Type:CVE
- ID:CVE-2021-38185
- SUG:NA
- DESC:Fix CVE-2021-38185</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
</package>
<package pkgid="e9d59b4217495807cd42a6cff08f0a73a3ce6a86a95aecf8cd806aaf9640b2cc" name="cpio-debugsource" arch="x86_64">
  <version epoch="0" ver="2.13" rel="10.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-9" date="1687262400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert fix CVE-2015-1197 because it causes AT testcases problems</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 2.13-10" date="1693396800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches</changelog>
</package>
<package pkgid="abac3edbd796ae1f0aa1032c970be108b06d99528d8dd55b086bad7dda933d78" name="cpio-debugsource" arch="x86_64">
  <version epoch="0" ver="2.13" rel="8.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.13-4" date="1622808000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add 'autoconf automake' to BuildRequires to use autoreconf command</changelog>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 2.13-5" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Solve mutiple definition compilation error</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 2.13-6" date="1629806400">- Type:CVE
- ID:CVE-2021-38185
- SUG:NA
- DESC:Fix CVE-2021-38185</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
</package>
<package pkgid="0640ddc27986b9a75e5f23f84cc25c688b95390dcd0124536acd4f89797551bd" name="cpio-help" arch="noarch">
  <version epoch="0" ver="2.13" rel="10.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-9" date="1687262400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert fix CVE-2015-1197 because it causes AT testcases problems</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 2.13-10" date="1693396800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches</changelog>
</package>
<package pkgid="f6c2089790264f670aaa35dc37dda82dac963ce63ef3a25bb66474aeb90679c6" name="cpio-help" arch="noarch">
  <version epoch="0" ver="2.13" rel="8.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.13-4" date="1622808000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add 'autoconf automake' to BuildRequires to use autoreconf command</changelog>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 2.13-5" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Solve mutiple definition compilation error</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 2.13-6" date="1629806400">- Type:CVE
- ID:CVE-2021-38185
- SUG:NA
- DESC:Fix CVE-2021-38185</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
</package>
<package pkgid="de847d88c241e97ede51a67beea179af1a4246510ec85ab8b42bbc178e985551" name="cpp" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="c584975188952608108781045cef1884a5d194f646974609cb47b18449d67e2e" name="cpp" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="a6f40abfa0c65b7fff2df125510334d3669161fbd943e598c29293ec3b7a3a70" name="cpp" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="335fbfe274523158ae7e85fc034ef5061ca89619d66eb00d57b1055f6b2f41d5" name="cpp" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="d189f34c2511d6f4f1efbcb3cae633cd82d2eab938b80f77220c6c9d728caeb9" name="cpp" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="da4e61818eca15532afbff10ebcd1d4d7d8b4e342229a35ce4ff50979bb112b5" name="cpp" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="5c3dc93c401564e39dc8fd3568721baf3ed2968a87804a4783de44dd647408b1" name="cpp-gpgme" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-2" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the URL of source code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-3" date="1709726400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add gpgme.pc file</changelog>
</package>
<package pkgid="77cfd9586356b3be436c97938d4296f295df9d1d097a33eb85fc09398b6580b1" name="cpp-httplib" arch="x86_64">
  <version epoch="0" ver="0.12.4" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.12.4-1" date="1686657600">- Update to 0.12.4 for fix CVE-2023-26130</changelog>
</package>
<package pkgid="7282208daf1dd17c2f5982684921ca3918a7b184cddc21a0d034f377193d108b" name="crash" arch="x86_64">
  <version epoch="0" ver="8.0.2" rel="1.oe2203sp1"/>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.2.9-5" date="1630670400">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-1" date="1640347200">- Upgrade version to 7.3.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-2" date="1640865600">- fix seek error "IRQ stack pointer"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-3" date="1640952000">- add SDEI stack resolution</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 7.3.0-4" date="1644321600">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.3.0-5" date="1645617600">- Handle task_struct cpu member changes for kernels &gt;= 5.16-rc1
  and delete use_system_readline_v3.patch</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-6" date="1665316800">- fix gdb CVE-2019-1010180</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 7.3.0-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="Ding Hui &lt;dinghui@sangfor.com.cn&gt; - 7.3.0-8" date="1669896000">- fix backtraces of arm64 KASAN kernel dumpfile truncated</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
</package>
<package pkgid="b52e2375300a7717e552714f1233d0a1a007d115e7bd8bf3eff9d5824c599edc" name="crash-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0.2" rel="1.oe2203sp1"/>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.2.9-5" date="1630670400">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-1" date="1640347200">- Upgrade version to 7.3.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-2" date="1640865600">- fix seek error "IRQ stack pointer"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-3" date="1640952000">- add SDEI stack resolution</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 7.3.0-4" date="1644321600">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.3.0-5" date="1645617600">- Handle task_struct cpu member changes for kernels &gt;= 5.16-rc1
  and delete use_system_readline_v3.patch</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-6" date="1665316800">- fix gdb CVE-2019-1010180</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 7.3.0-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="Ding Hui &lt;dinghui@sangfor.com.cn&gt; - 7.3.0-8" date="1669896000">- fix backtraces of arm64 KASAN kernel dumpfile truncated</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
</package>
<package pkgid="5659a0e3cac10ebf424180408f4afed9c0c921a1aa3aff5a92ef1663ec926b80" name="crash-debugsource" arch="x86_64">
  <version epoch="0" ver="8.0.2" rel="1.oe2203sp1"/>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.2.9-5" date="1630670400">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-1" date="1640347200">- Upgrade version to 7.3.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-2" date="1640865600">- fix seek error "IRQ stack pointer"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-3" date="1640952000">- add SDEI stack resolution</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 7.3.0-4" date="1644321600">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.3.0-5" date="1645617600">- Handle task_struct cpu member changes for kernels &gt;= 5.16-rc1
  and delete use_system_readline_v3.patch</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-6" date="1665316800">- fix gdb CVE-2019-1010180</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 7.3.0-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="Ding Hui &lt;dinghui@sangfor.com.cn&gt; - 7.3.0-8" date="1669896000">- fix backtraces of arm64 KASAN kernel dumpfile truncated</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
</package>
<package pkgid="22c9c5fa7d839930fb243c8e4886905d6d434ad78b8b584bacdc8073bb258e0e" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="8.0.2" rel="1.oe2203sp1"/>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.2.9-5" date="1630670400">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-1" date="1640347200">- Upgrade version to 7.3.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-2" date="1640865600">- fix seek error "IRQ stack pointer"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-3" date="1640952000">- add SDEI stack resolution</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 7.3.0-4" date="1644321600">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.3.0-5" date="1645617600">- Handle task_struct cpu member changes for kernels &gt;= 5.16-rc1
  and delete use_system_readline_v3.patch</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-6" date="1665316800">- fix gdb CVE-2019-1010180</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 7.3.0-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="Ding Hui &lt;dinghui@sangfor.com.cn&gt; - 7.3.0-8" date="1669896000">- fix backtraces of arm64 KASAN kernel dumpfile truncated</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
</package>
<package pkgid="1d1feac5f5f0477c50c1ea82cdff7c4d0e7a3ecd3a921e1d299c53470b6b6c08" name="crash-help" arch="noarch">
  <version epoch="0" ver="8.0.2" rel="1.oe2203sp1"/>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.2.9-5" date="1630670400">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-1" date="1640347200">- Upgrade version to 7.3.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-2" date="1640865600">- fix seek error "IRQ stack pointer"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-3" date="1640952000">- add SDEI stack resolution</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 7.3.0-4" date="1644321600">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.3.0-5" date="1645617600">- Handle task_struct cpu member changes for kernels &gt;= 5.16-rc1
  and delete use_system_readline_v3.patch</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-6" date="1665316800">- fix gdb CVE-2019-1010180</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 7.3.0-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="Ding Hui &lt;dinghui@sangfor.com.cn&gt; - 7.3.0-8" date="1669896000">- fix backtraces of arm64 KASAN kernel dumpfile truncated</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
</package>
<package pkgid="a306d8015f1704e7bff5cb5c234a1f47d532b457a4911b71221adf9f5a30af52" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.17.2" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-8" date="1660305600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ldb require version</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-9" date="1661515200">- Type:cves
- ID:CVE-2022-32743
- SUG:NA
- DESC:fix CVE-2022-32743</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-10" date="1661947200">- Type:cves
- ID:CVE-2022-1615
- SUG:NA
- DESC:fix CVE-2022-1615</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
</package>
<package pkgid="2ac6377ab77c53e2adece6b3c95272142f7069fb14e7431a631e87922f0dc1c5" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="10.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
</package>
<package pkgid="9daee2422c798aa52ee03e3795a372ab900408577223f971cf6239109f3775b7" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="11.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-11" date="1705665600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:speeds up the creation of source rpm</changelog>
</package>
<package pkgid="b0bc23bcdd9b0a12788a155929d5a3f59fc0d3aefdb05a961ff35d4383b2e2c4" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="2.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
</package>
<package pkgid="9326a75fbd2c44ea283b5ade2c95f8dbb8e7fb22977d9bfd0b245153441fc350" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
</package>
<package pkgid="12d3303c34b8885e0c115fc868ef99f73b6bfda38efa0a7a2a6050670562b8b1" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="6.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
</package>
<package pkgid="615760bd996fc1277b0e621eafecb9a7591ed995e576328f397267ba9719259f" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="8.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
</package>
<package pkgid="1ceed0804dc691569e2227a65b347b062250bb5bc86565b5648b00f81864abd7" name="cups" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="707104c1f091e3cc1745bfb264065e2e59e5b6273ca9f1ac61ba8e72c8c5c279" name="cups" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="dddf6d82168c08c48c380611e7ba489a872607e9e437ba409f6bb695a0b3c0d2" name="cups" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="ba1c5b3928fb8338bd406217ded78e7f59e50b5ccf9f54257084d51f04e2e59e" name="cups" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="ddb5ab75ea5a3bf90c78ef8ea7ded844b7c24a6b31fa337e79d34636919ca243" name="cups-client" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="ba21e9eeadac6eb2a502f5ec60e7382a87f5389ff2562d38fd220de744141237" name="cups-client" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="a6f7f2c8d4ce2f7b3ba8614a2e522ba4ffd69b7d78fcf9c010aac2ab1659d93b" name="cups-client" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="3f458570821b30a05302b7be85a119ce1fed8b2222570a2522f78f342b0393f6" name="cups-client" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="390341d26c87415d854b17419c13ce69ad9eb603ccde4ba63b330fd31aaff57c" name="cups-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="c02f7eaf911682a831685e7b2ccad0a2ead6ef7e815e5c1ea6e2a8d2a4937b29" name="cups-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="a6c1d8455e5f83123e3d34754e0c89dd862912ae75f5c4cb13f8d2f029ae6fd4" name="cups-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="492ae28816295600d0d415576912b32f2902ba37cbfb0664ace59231a0e966b0" name="cups-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="759de49350dd3a7956fdf4ce0f539584bc64b63754dc20ac5c996de65a1dc0b8" name="cups-debugsource" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="6763dd16c368532ef3e1bc9cb185d1d97afce85c35448b90e0849754d8203dc4" name="cups-debugsource" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="23b3fd68e086bb9fe4fb3c5d336ae8af9ae5e3d670338b2d36a3de8ada6fc5fa" name="cups-debugsource" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="6269e4191c3816d81c922e006bc3659eeb19dfa1a090afd2c06a74924ceb8e65" name="cups-debugsource" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="a93cb63214a59f85418df59e2c6f6d8d89978108d9f86cb933311ed5edd98895" name="cups-devel" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="2e4dc59b18c78fde890014778d7271251a2248b82aeef9ef968e49c0150d55e2" name="cups-devel" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="740f0d31105c497b6a80573be8bba14aa56b90f6384817ac0746f8c7e33ef7ef" name="cups-devel" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="67838771f227cd516726de33980fe36642c55ec80e75dce01ea6de85cb61e1e4" name="cups-devel" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="1fc76f585a51051a376d0f533f355d747fe3ff9167831095eb39ab2a577b56d4" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="13f2dd1c9f78df02449a10c9d4d37924cb25c4c57ef4b8de970bf0c9b6f15352" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="4e87bd7b1188433ca14783bcf99a8389d2c952bb6c26de9b9bac04840dc2d44e" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="65169e156466b55b2cfdf3cad57723c7171de2a7a471bc261ec4756b0f256160" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="05b9e99a0a634738d0b85d4357afe84cec5e7b31076febd247c504eead4a2cfd" name="cups-filters" arch="x86_64">
  <version epoch="0" ver="1.28.9" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
</package>
<package pkgid="ebc9dfcff3f5ba036efe3428710faa222a4c8bd87e1e71f5ab222880b565c228" name="cups-filters-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.28.9" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
</package>
<package pkgid="1a869b1dba77d7803fc043766120dfaf0b548f0e3af06fe62aa688bcc1d0a2a6" name="cups-filters-debugsource" arch="x86_64">
  <version epoch="0" ver="1.28.9" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
</package>
<package pkgid="95c7848fd8c9dbb05d088b00712462af9073d2966dfbd297ee9c7ebd17898568" name="cups-filters-devel" arch="x86_64">
  <version epoch="0" ver="1.28.9" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
</package>
<package pkgid="9afa0300b709e6db25879787225369634bbede8f0cf8a4c31f666ab296276cc6" name="cups-filters-help" arch="noarch">
  <version epoch="0" ver="1.28.9" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
</package>
<package pkgid="a05275ca5f9f809c928470d24dfdc7a134d0fff99e76f5b0fdb52b1ca7f30a1d" name="cups-help" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="08b5c6b098bb3cccbfc6261312106fbf7b69240c62dd951cec648d82ce18ab0d" name="cups-help" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="700fc92178fa70202c99e876b14a0439027772105f7b292d02a11225df4716dc" name="cups-help" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="2b9dd0b517cca518b003374c2bc60dba85d2ed39effbc88ab18baef71ca0e0b9" name="cups-help" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="ff40e851d1ec1463c2efca35d116f98934cdf7f6db1fd59bd2cdf3fafee7f423" name="cups-ipptool" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="0e1f6c0dd66b0b101d8dc6df504dd5b71393109728e393947bba0f2fd29e9211" name="cups-ipptool" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="927bcce700663844fd6a9f1d4750ce958e9ea639d809dd2ea885c21385410dcf" name="cups-ipptool" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="d0da811caa50c293ea2b6b406bc772d0cd0dce979572d8f2b610c67302bfce33" name="cups-ipptool" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="721fe482b1388067b4ca9e564915ebcb746f8b5c0f7af21a4f33f931fc4f8a68" name="cups-libs" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="95c62007931233f8b3de9a003551e408a24e78720097c9e5930fd3115b566df2" name="cups-libs" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="2140421e6618b5bf3b9a8ec4237cb0c51e54434350aaabb846c7183ec6f7de81" name="cups-libs" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="e61564a440b9468f4e902141d17c2547be0ae04e629fabaa1ad026cad58c6308" name="cups-libs" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="6c9d5ff8b0f0a245009af063b9d09bb37441ecb6c404da544c3c5c8f8bb037e2" name="cups-lpd" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="6b6c62b51bfbe67a047b9d73e4a5b643f78cabbe8c83b291c6c1884b611b6f2f" name="cups-lpd" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="3bb7ab5f4c6b22a6fbdfe31c02b9c8c7b7ab40ddd06950aedb3e9559c3a36376" name="cups-lpd" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="c2ff612fc896a395981cc7803c9f7c03f15ebe4e60eeebf2f325a56828c0e857" name="cups-lpd" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="a2f58fc19bea7e85f8689b91631968d980efb5b8e46ba9d9bca7e22cd0a102d6" name="cups-printerapp" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="c677ef348089151efce2f44cb841d6725a77631538acccdb3b5b6f797514e6ab" name="cups-printerapp" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="20934bd5278988c2f10711a32a857f79f3804e231bb74b1fb71b0b3ab04e9412" name="cups-printerapp" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="36273a498e7d9216eafd3ef2cec8402c864abf65ae8416cbf3e56d607d99b028" name="cups-printerapp" arch="x86_64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="6cdf635455558a47a3e52440c1cfefd3ab752db0b0422fafba17c0de4fee27c0" name="curl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="14.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-5" date="1651838400">- Type:cves
- CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
- SUG:NA
- DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
</package>
<package pkgid="8bf618bc2e8ef22aea0f1284760831f5315e3a31e3590e834b71b026ec5b5ae6" name="curl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="15.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
</package>
<package pkgid="b965796a949a2d6f2d931a798b4d91fdcc2666a6f06b26337b4108edb05d49a4" name="curl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="16.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
</package>
<package pkgid="bb4f55f2426bb3e8840c54440c78b5a59f18b4d537259808eb0ca4b2bd019765" name="curl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="17.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
</package>
<package pkgid="30a24ac58b3e99f29e541f414d4918dde8f49bc945151f20855f7442932586e0" name="curl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="19.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
</package>
<package pkgid="9f3f1027e21b8174cfb8f9d1a1f85dc4828772f30e7346f73dca367f85af8fba" name="curl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="20.oe2203sp1"/>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
</package>
<package pkgid="9724d90c63f14b2958faa9b2091cdf1f97367736175864ed4e05e98ccba12867" name="curl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="23.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
</package>
<package pkgid="06beba6f92fead8fcc8d301323f8eac196f08567a44773f50051df1d8cb06454" name="curl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="24.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
</package>
<package pkgid="2da17349a3a4860ddd0bb96eb5e3ac80964603d51217ccc2fad2b6c2b67098c9" name="curl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="25.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
</package>
<package pkgid="bc64626401be12fba8325d5898ee2263422a5d6d8b1524a437779f45dfd9fc31" name="curl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="27.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
</package>
<package pkgid="ce1fead6a0c26e9c32b54f44748ea308acbfb7ced7faaac4e941f47fc2ba64be" name="curl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="28.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
</package>
<package pkgid="5a96b66314343de8e62fafefdd9fb0bfaab8f67780db5dd39737da843390cd21" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="14.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-5" date="1651838400">- Type:cves
- CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
- SUG:NA
- DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
</package>
<package pkgid="5bcbe7ca6bfcae36dd291c654f03d45e75077e7d073b5ef735b4219dcfff5486" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="15.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
</package>
<package pkgid="21c89d04c896d70f5c1368c3ebd1bf9b58365283e9e8b187539aaab4fa71dc7a" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="16.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
</package>
<package pkgid="52cd6440de6ff416d207912e5a64734e082cf191e40d638a17ec23a23963c1d9" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="17.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
</package>
<package pkgid="687d3594b85defd1b6a07c553de7f67976072200cdc70748575fdbefde644e9d" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="19.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
</package>
<package pkgid="f90acff38d17de76d525c2d7dd7339dfee80b9771af21b48b9e1fea72a67045c" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="20.oe2203sp1"/>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
</package>
<package pkgid="e4fed284927113ec5a4bf19cffbd2b2d7d25ba6e836c5168fa3e9d6972e1b04c" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="23.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
</package>
<package pkgid="251c1e1ced9afb2def12101d392b15b3c7866999b2596e8261b3ec351a9e0ed8" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="24.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
</package>
<package pkgid="6b55b51a1f4364440dfaaef4b713373bcd1a6681fe9a60139cd73529ad25bbdd" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="25.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
</package>
<package pkgid="353b5a1c7a9f16fe6f3542f90b774b1c645e8277ec7af856a00819227813ddad" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="27.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
</package>
<package pkgid="f9dfca08efd8d0a2246b5ddc79c21733055bde5b96bb41d53c24a3db29922973" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="28.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
</package>
<package pkgid="0e976a003e6af64a7618781b766130c9ddce58ba8d11d868ff3ae0b74c92045d" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="14.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-5" date="1651838400">- Type:cves
- CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
- SUG:NA
- DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
</package>
<package pkgid="e10d613be2723104110819b38485826305edf8b0c530f6af11d6934ed00940cf" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="15.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
</package>
<package pkgid="8f02e49f222e37a61c97ce04cae6d8ec1a55bc41ac1367f94a693a090dc0a281" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="16.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
</package>
<package pkgid="4526237c39018cc1bed6f36e6921b3e1b95918bd15ecd3d794a243f8d4d7c876" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="17.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
</package>
<package pkgid="3b765de217df66a972a6f42f68c8ab142c80fef2cd44aa23c22a187a266f9c0c" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="19.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
</package>
<package pkgid="66de222753333a0ecf55fd2d3de9ec5dc161af44288c8b489196d82dbe24072e" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="20.oe2203sp1"/>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
</package>
<package pkgid="1bc4ffd4d77d2588896696660190e702b5feea24b127a3d5fa6086a0346643d4" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="23.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
</package>
<package pkgid="957a76a00d2dc0eea1c733fdee8ca1db89da3c5fd4ac7aeca6b694e354a8db40" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="24.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
</package>
<package pkgid="34ea723ab1612f6f06f838e6822010ab5f69aeab60f004df6ddfa96fe15c8920" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="25.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
</package>
<package pkgid="74168f6cff65e3cc08d72320a64507bc443cfccdc556781b0a39d2dc627f1901" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="27.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
</package>
<package pkgid="447c2b3ad6759b458737f7128e9c4423ea133cdd1a642f4f500202666fe45a66" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="28.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
</package>
<package pkgid="7b9feb8091b9a107a717bc7a685625a19c425f43f9c5333fdda3aa0296733c47" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="14.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-5" date="1651838400">- Type:cves
- CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
- SUG:NA
- DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
</package>
<package pkgid="37adc10c92ad915ec70577b6a890dfaf10f6a96c0e67b3971f3847c122f036aa" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="15.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
</package>
<package pkgid="43161fc1d147601601c8b60a24a45e427d73d479f1ac379440160239606d1d34" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="16.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
</package>
<package pkgid="8ecb1fc597ba28524053cab1901513aa156794cc489536dae92219aeb5fcc8e6" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="17.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
</package>
<package pkgid="be27956ca972ed576f8a9566ec3bf7858cf208bb81fcd5589e88342e56e83682" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="19.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
</package>
<package pkgid="0ca1081702941694a9e1ec3d95cd38336a9d905c4519faa2e80681f61cc7e419" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="20.oe2203sp1"/>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
</package>
<package pkgid="97664903a2395d9212a9677874f13031b05dfbe20ba64a74b434649b38ff7648" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="23.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
</package>
<package pkgid="e87f4766d17a494cf6c0b1b230de9c443fbbbe9e086deca6af138fce73ae04ca" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="24.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
</package>
<package pkgid="d5ebd65882ed076ed18840798d6b68da697f5db12c25bbd4eb410dc8a191259b" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="25.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
</package>
<package pkgid="6bfaca41c34bc737b7aea42f4831c018e2aa8c8e77df8ee79343fbfc2e5d0889" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="27.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
</package>
<package pkgid="67c2259ba0d53520c4dd9c5889e21126f02eb8602eb6246134b06f735cc10414" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="28.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
</package>
<package pkgid="efa2edd269e90d7977fdac74221121e9507e06e476d24d59640b3a8ac9d04720" name="dbus" arch="x86_64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="744c14fb266befca6fcc54932e6034a3f83ccd250f27ed88fb52e69fe2726b80" name="dbus-broker" arch="x86_64">
  <version epoch="0" ver="29" rel="9.oe2203sp1"/>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-1" date="1639656000">- Type:enhance
- CVE:NA
- SUG:NA
- DESC:update dbus-broker to v29</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-2" date="1645531200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:don't enable/disable dbus.socket when install/uninstall dbus-broker.</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-3" date="1667908800">- Enable test-parallel</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-4" date="1669118400">- Fix CVE-2022-31212 and CVE-31213</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-5" date="1669896000">- Optimize installing and removing dbus-broker</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-6" date="1686139200">- Enable dbus-broker to reexecute without disconnection</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-7" date="1687694400">- sync patches from dbus-broker community</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-8" date="1691582400">- sync patches from dbus-broker community</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-9" date="1696680000">- Fix buffer leakage</changelog>
</package>
<package pkgid="5167793e49abef9eed55a75a2cf0d0b98f93d4fa971e13bb289c7c4d50a23028" name="dbus-broker-debuginfo" arch="x86_64">
  <version epoch="0" ver="29" rel="9.oe2203sp1"/>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-1" date="1639656000">- Type:enhance
- CVE:NA
- SUG:NA
- DESC:update dbus-broker to v29</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-2" date="1645531200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:don't enable/disable dbus.socket when install/uninstall dbus-broker.</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-3" date="1667908800">- Enable test-parallel</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-4" date="1669118400">- Fix CVE-2022-31212 and CVE-31213</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-5" date="1669896000">- Optimize installing and removing dbus-broker</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-6" date="1686139200">- Enable dbus-broker to reexecute without disconnection</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-7" date="1687694400">- sync patches from dbus-broker community</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-8" date="1691582400">- sync patches from dbus-broker community</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-9" date="1696680000">- Fix buffer leakage</changelog>
</package>
<package pkgid="dcd4903a81123057a8e5e043ad758c4223159c757a87d151aaeeda56742ba5cb" name="dbus-broker-debugsource" arch="x86_64">
  <version epoch="0" ver="29" rel="9.oe2203sp1"/>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-1" date="1639656000">- Type:enhance
- CVE:NA
- SUG:NA
- DESC:update dbus-broker to v29</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-2" date="1645531200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:don't enable/disable dbus.socket when install/uninstall dbus-broker.</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-3" date="1667908800">- Enable test-parallel</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-4" date="1669118400">- Fix CVE-2022-31212 and CVE-31213</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-5" date="1669896000">- Optimize installing and removing dbus-broker</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-6" date="1686139200">- Enable dbus-broker to reexecute without disconnection</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-7" date="1687694400">- sync patches from dbus-broker community</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-8" date="1691582400">- sync patches from dbus-broker community</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-9" date="1696680000">- Fix buffer leakage</changelog>
</package>
<package pkgid="5da7c7f7b30898069839a064790e1ea14fa8e75715067d6076fcc7ecd1cfaf9b" name="dbus-common" arch="noarch">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="898f6fefe64d2baa6f0467b5de186d174bb03141b7ce34f6bc9550d7c4f6f748" name="dbus-daemon" arch="x86_64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="1ce4a35bf894381122f5ddb65e50af2db26e5c8da02f6e0795f6d4466cac22a8" name="dbus-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="2ea375e23a733c13296d485b1ff753c7c223af0ce620f47f5ec76e810f3bde0a" name="dbus-debugsource" arch="x86_64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="80dca40cee7f3e70741325859746aca867981c7ed71314e279ef0a1bb66f5735" name="dbus-devel" arch="x86_64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="ca431dac578e0e8aff425232956038a3c9bffb0ebb8ce43c4af62cb9577a01d4" name="dbus-help" arch="noarch">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="239c5c651dad2b99ba91fb907106bbf85b04ca663acc9c23e95000d43f9b87c3" name="dbus-libs" arch="x86_64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="007b28de26d70a85a7ab1414e447e440ff461a3125113838230bd9ee72de2534" name="dbus-tools" arch="x86_64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="c9dac94c2d38b93711239801f56ea6995435fbda917b8be2b1471ebf5922ba2a" name="dbus-x11" arch="x86_64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="7b6f92bdca872aea44f7336c68a2d8afae3ab32c7a49c45da91e5fb2e002038b" name="digest-list-tools" arch="x86_64">
  <version epoch="0" ver="0.3.95" rel="11.oe2203sp1"/>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-3" date="1627905600">- Fix multiple definition of pgp_algo_mapping</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-4" date="1629806400">- Fix warning in digestlist.conf</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-5" date="1638446400">- Fix typo and duplicated kernel parameters</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.3.95-6" date="1659182400">- Fix sm3 algorithm name</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-7" date="1660651200">- Fix faulty code, file resource leakeage and memory leakage</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-8" date="1661256000">- Update fix-faulty-code.patch</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-9" date="1662552000">- Delete setup-ima-digest-lists.service</changelog>
  <changelog author="gaoyusong &lt;gaoyusong2@huawei.com&gt; - 0.3.95-10" date="1671537600">- Fix error exit in dracut program</changelog>
  <changelog author="zhoushuiqing &lt;zhoushuiqing2@huawei.com&gt; - 0.3.95-11" date="1684929600">- Fix cap_struct to adapter libcap 2.61</changelog>
</package>
<package pkgid="0941b0ed287ccee35c6be45b9a3f64fc00148bad9dfc8d9cf465d0a07b9545d3" name="digest-list-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.3.95" rel="11.oe2203sp1"/>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-3" date="1627905600">- Fix multiple definition of pgp_algo_mapping</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-4" date="1629806400">- Fix warning in digestlist.conf</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-5" date="1638446400">- Fix typo and duplicated kernel parameters</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.3.95-6" date="1659182400">- Fix sm3 algorithm name</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-7" date="1660651200">- Fix faulty code, file resource leakeage and memory leakage</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-8" date="1661256000">- Update fix-faulty-code.patch</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-9" date="1662552000">- Delete setup-ima-digest-lists.service</changelog>
  <changelog author="gaoyusong &lt;gaoyusong2@huawei.com&gt; - 0.3.95-10" date="1671537600">- Fix error exit in dracut program</changelog>
  <changelog author="zhoushuiqing &lt;zhoushuiqing2@huawei.com&gt; - 0.3.95-11" date="1684929600">- Fix cap_struct to adapter libcap 2.61</changelog>
</package>
<package pkgid="169212d36112a04a86bed3b1a915c2e2b9a2befcee53dc3fd3e99ed466f52b64" name="digest-list-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="0.3.95" rel="11.oe2203sp1"/>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-3" date="1627905600">- Fix multiple definition of pgp_algo_mapping</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-4" date="1629806400">- Fix warning in digestlist.conf</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-5" date="1638446400">- Fix typo and duplicated kernel parameters</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.3.95-6" date="1659182400">- Fix sm3 algorithm name</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-7" date="1660651200">- Fix faulty code, file resource leakeage and memory leakage</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-8" date="1661256000">- Update fix-faulty-code.patch</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-9" date="1662552000">- Delete setup-ima-digest-lists.service</changelog>
  <changelog author="gaoyusong &lt;gaoyusong2@huawei.com&gt; - 0.3.95-10" date="1671537600">- Fix error exit in dracut program</changelog>
  <changelog author="zhoushuiqing &lt;zhoushuiqing2@huawei.com&gt; - 0.3.95-11" date="1684929600">- Fix cap_struct to adapter libcap 2.61</changelog>
</package>
<package pkgid="e932a359965a7933fe2d0e081b9e053fcfa7d7b347a33aedfffc9ea97e922728" name="digest-list-tools-devel" arch="x86_64">
  <version epoch="0" ver="0.3.95" rel="11.oe2203sp1"/>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-3" date="1627905600">- Fix multiple definition of pgp_algo_mapping</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-4" date="1629806400">- Fix warning in digestlist.conf</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-5" date="1638446400">- Fix typo and duplicated kernel parameters</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.3.95-6" date="1659182400">- Fix sm3 algorithm name</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-7" date="1660651200">- Fix faulty code, file resource leakeage and memory leakage</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-8" date="1661256000">- Update fix-faulty-code.patch</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-9" date="1662552000">- Delete setup-ima-digest-lists.service</changelog>
  <changelog author="gaoyusong &lt;gaoyusong2@huawei.com&gt; - 0.3.95-10" date="1671537600">- Fix error exit in dracut program</changelog>
  <changelog author="zhoushuiqing &lt;zhoushuiqing2@huawei.com&gt; - 0.3.95-11" date="1684929600">- Fix cap_struct to adapter libcap 2.61</changelog>
</package>
<package pkgid="fda9156a0d1a596c4988c3bf63b5a22972017a42ff9144ff76c5c8b403cdcb50" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="19.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
</package>
<package pkgid="e2cda9af14eb2ec194771f76aacda56ec3aacd653f623f710501f176a0746204" name="djvulibre-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="19.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
</package>
<package pkgid="bd4cc2c2da2f9908907323129fd67b9de8c7543ea27e0ec62bb7be3076b834da" name="djvulibre-debugsource" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="19.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
</package>
<package pkgid="ae78531912a9cf4daede050dc75501ccfa6024c5698a5cd436389031b24d3a5a" name="djvulibre-devel" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="19.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
</package>
<package pkgid="916075374f69c8ff292b64351642ed5b13d54faa060f5bedd1e68452cbf5d376" name="djvulibre-help" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="19.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
</package>
<package pkgid="d1f62e33f4abc6541136351f035bad18a0b786ce69250dfd4b2c4a76b872be70" name="dmidecode" arch="x86_64">
  <version epoch="1" ver="3.4" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 3.3-1" date="1638273600">- update to 3.3</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 3.3-2" date="1643457600">- add command --compat-uuid</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 3.3-3" date="1645704000">- dmidecode: Fix crash with -u option</changelog>
  <changelog author="fanrui &lt;fary.fanrui@huawei.com&gt; - 1:3.3-4" date="1666699200">- rebuild package</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:3.3-4" date="1667476800">- Add sw64 architecture</changelog>
  <changelog author="fanrui&lt;fary.fanrui@huawei.com&gt; - 1:3.4-1" date="1667995200">- Update to 3.4</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 1:3.4-2" date="1668427200">- add loongarch support for dmidecode</changelog>
  <changelog author="Cunshu Ni &lt;nicunshu@huawei.com&gt; - 1:3.4-3" date="1681819200">- fix CVE-2023-30630</changelog>
</package>
<package pkgid="0723b8d04023ce4ce591bd26c5cd68bd35e77089c2c074e7eb13ef5f676ec6a6" name="dmidecode-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.4" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 3.3-1" date="1638273600">- update to 3.3</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 3.3-2" date="1643457600">- add command --compat-uuid</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 3.3-3" date="1645704000">- dmidecode: Fix crash with -u option</changelog>
  <changelog author="fanrui &lt;fary.fanrui@huawei.com&gt; - 1:3.3-4" date="1666699200">- rebuild package</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:3.3-4" date="1667476800">- Add sw64 architecture</changelog>
  <changelog author="fanrui&lt;fary.fanrui@huawei.com&gt; - 1:3.4-1" date="1667995200">- Update to 3.4</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 1:3.4-2" date="1668427200">- add loongarch support for dmidecode</changelog>
  <changelog author="Cunshu Ni &lt;nicunshu@huawei.com&gt; - 1:3.4-3" date="1681819200">- fix CVE-2023-30630</changelog>
</package>
<package pkgid="5ec04e37250d701de123af7ef829f3a31be602cf0692e6fa184cd585d79b5697" name="dmidecode-debugsource" arch="x86_64">
  <version epoch="1" ver="3.4" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 3.3-1" date="1638273600">- update to 3.3</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 3.3-2" date="1643457600">- add command --compat-uuid</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 3.3-3" date="1645704000">- dmidecode: Fix crash with -u option</changelog>
  <changelog author="fanrui &lt;fary.fanrui@huawei.com&gt; - 1:3.3-4" date="1666699200">- rebuild package</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:3.3-4" date="1667476800">- Add sw64 architecture</changelog>
  <changelog author="fanrui&lt;fary.fanrui@huawei.com&gt; - 1:3.4-1" date="1667995200">- Update to 3.4</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 1:3.4-2" date="1668427200">- add loongarch support for dmidecode</changelog>
  <changelog author="Cunshu Ni &lt;nicunshu@huawei.com&gt; - 1:3.4-3" date="1681819200">- fix CVE-2023-30630</changelog>
</package>
<package pkgid="55c8b7626f23e08721ee02e78f86c30e060ae002c331e131d7ed767b91bb970b" name="dmraid" arch="x86_64">
  <version epoch="0" ver="1.0.0.rc16" rel="55.oe2203sp1"/>
  <changelog author="shaoxuehua &lt;shao_xuehua@hoperun.com&gt; - 1.0.0.rc16-55" date="1695297600">- fix segmentation fault when using "dmraid -h" on aarch64</changelog>
</package>
<package pkgid="c42556673b45a28960ee10b353d7e07c7efedc9253365a56f50ed9dda5d27476" name="dmraid-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.0.rc16" rel="55.oe2203sp1"/>
  <changelog author="shaoxuehua &lt;shao_xuehua@hoperun.com&gt; - 1.0.0.rc16-55" date="1695297600">- fix segmentation fault when using "dmraid -h" on aarch64</changelog>
</package>
<package pkgid="68c40e48bcec8b1abfba3197d55d03c314b2be4ab1991a20f7f3000542a17612" name="dmraid-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.0.rc16" rel="55.oe2203sp1"/>
  <changelog author="shaoxuehua &lt;shao_xuehua@hoperun.com&gt; - 1.0.0.rc16-55" date="1695297600">- fix segmentation fault when using "dmraid -h" on aarch64</changelog>
</package>
<package pkgid="5e2c3339bf0e3f1b9f30cb76f187d3ac1f3debee9bbc58c39c39f3e774c91d20" name="dmraid-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0.rc16" rel="55.oe2203sp1"/>
  <changelog author="shaoxuehua &lt;shao_xuehua@hoperun.com&gt; - 1.0.0.rc16-55" date="1695297600">- fix segmentation fault when using "dmraid -h" on aarch64</changelog>
</package>
<package pkgid="23276b8e05a228da9a6a41b837201f5332ec97e1ab04e5645cba9bb7b1799d1f" name="dmraid-events" arch="x86_64">
  <version epoch="0" ver="1.0.0.rc16" rel="55.oe2203sp1"/>
  <changelog author="shaoxuehua &lt;shao_xuehua@hoperun.com&gt; - 1.0.0.rc16-55" date="1695297600">- fix segmentation fault when using "dmraid -h" on aarch64</changelog>
</package>
<package pkgid="a1557cd52feac350691f5bea8f61fb4f78e0d69c4e868d7c7f69c93baa604301" name="dmraid-events-logwatch" arch="x86_64">
  <version epoch="0" ver="1.0.0.rc16" rel="55.oe2203sp1"/>
  <changelog author="shaoxuehua &lt;shao_xuehua@hoperun.com&gt; - 1.0.0.rc16-55" date="1695297600">- fix segmentation fault when using "dmraid -h" on aarch64</changelog>
</package>
<package pkgid="1cecbc23f59967cf1f51c1c0ecc4415698dd31a5c2422dd7948c417a88910fa4" name="dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="10.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-1" date="1667476800">- DESC:upgrade dnf version to 4.14.0</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-2" date="1668600000">- DESC:correct the incorrect Obsoletes</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-3" date="1670587200">- DESC:enable DT</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587201">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
</package>
<package pkgid="fc136058eb21ac723e8bc1fb8d2f666e278a14213e7e868f6b11ab3f74242de8" name="dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="13.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587200">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
</package>
<package pkgid="52ef92dc7af25c4db2ebeff769e01b4d81076f2fe69776009ea97a4d0e14a84d" name="dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="14.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
</package>
<package pkgid="4e27f7a9c660dc2efd1769e73de19df7fc6f5bfe39f3f1894920999cd4614b7a" name="dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="15.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
</package>
<package pkgid="3e05c213b246f265de5b2c36bde7c53ae58f0e3802ddc932001c8f025b1e0a21" name="dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="18.oe2203sp1"/>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
</package>
<package pkgid="8ccc1d3c1ab7469820e44ddab42fec8783b1cc93f6920e3e6fcd9d589fdc3c4a" name="dnf-automatic" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="10.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-1" date="1667476800">- DESC:upgrade dnf version to 4.14.0</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-2" date="1668600000">- DESC:correct the incorrect Obsoletes</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-3" date="1670587200">- DESC:enable DT</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587201">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
</package>
<package pkgid="9bd73a2f99c09645a9cc14c44783c2011aee15c06a3d3dbafddcb2b223264e02" name="dnf-automatic" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="13.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587200">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
</package>
<package pkgid="e520fc7632c9b4612b8555f77db67154e957bbb86a260aeddf6a1a0b0155857d" name="dnf-automatic" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="14.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
</package>
<package pkgid="691a90a78ba82a6f428faf470f55b4b9e0c3cb06668b0936ab79765dc55f28e3" name="dnf-automatic" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="15.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
</package>
<package pkgid="5b47364ab0978815e3e930b967a0baec3c74672574e8dd8940d5f7de73833b9a" name="dnf-automatic" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="18.oe2203sp1"/>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
</package>
<package pkgid="bc7b6fa411925d369f4e8d342392661ea2a98c68086d6893a85ac5053260bce6" name="dnf-data" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="10.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-1" date="1667476800">- DESC:upgrade dnf version to 4.14.0</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-2" date="1668600000">- DESC:correct the incorrect Obsoletes</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-3" date="1670587200">- DESC:enable DT</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587201">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
</package>
<package pkgid="83f5e85653e2d6e1ada55666da57ada050987e8a4d7a2421823c8078474f306b" name="dnf-data" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="13.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587200">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
</package>
<package pkgid="3bad0cb37cb1c6dd7a14bff02a57abc50bc059abfd0282b32ffd6a397b9d47b8" name="dnf-data" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="14.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
</package>
<package pkgid="f559493a777aca5c5fd6fd7176107e8cd894e83c189151ab4ee21fed7ff6bff5" name="dnf-data" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="15.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
</package>
<package pkgid="3a0c7dbd70dbb11340ea5793514214e6ed4003b13a5537a99f51c90ef54c6a62" name="dnf-data" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="18.oe2203sp1"/>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
</package>
<package pkgid="66226d0143856f63ef866b15a18dfc6378f64ce87d8c9d5107e0e8b64a55ebe9" name="dnf-help" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="10.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-1" date="1667476800">- DESC:upgrade dnf version to 4.14.0</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-2" date="1668600000">- DESC:correct the incorrect Obsoletes</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-3" date="1670587200">- DESC:enable DT</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587201">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
</package>
<package pkgid="cbb00e5f4dbc56bd0f9feeb988cd58dadec7541c16df1cc2b24dabb214cf0a27" name="dnf-help" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="13.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587200">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
</package>
<package pkgid="ba837e0f741a49d959f9a51d1e5008ea952ab8b977440beb8fe272437d9d64b3" name="dnf-help" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="14.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
</package>
<package pkgid="cf55a3dfa834b7610509cc4977f2546dc90103af70f69200f9f2d8065b709670" name="dnf-help" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="15.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
</package>
<package pkgid="29fc9881c10d79e173d73038a58b65d7275d2a8a46cea394a572efd670dc9150" name="dnf-help" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="18.oe2203sp1"/>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
</package>
<package pkgid="cd5d5a08b26e2baf0d7c733fe8a1cf7a3dfefbadcb1d7bb354f1bd0183867cae" name="dnf-plugins-core" arch="noarch">
  <version epoch="0" ver="4.3.1" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 4.0.17-3" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-1" date="1637668800">- DESC:update to 4.0.24</changelog>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 4.0.24-2" date="1641556800">- DESC:delete buildrequires of python-nose</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-3" date="1642852800">- DESC:Reposync does not stop downloading packages</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 4.0.24-4" date="1653566400">- DESC: Remove redundant BuildRequires</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.0.24-5" date="1661169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add configfile post-transaction-actions.d</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-1" date="1667476800">- DESC:upgrade dnf-plugins-core version to 4.3.1</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-2" date="1669896000">- DESC:modify incorrect contents in spec file</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-3" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value</changelog>
</package>
<package pkgid="64d51a85eef4ea24e3fe46248290c40714f439bb870ba6ab09295794d2b72e28" name="dnf-plugins-core-help" arch="noarch">
  <version epoch="0" ver="4.3.1" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 4.0.17-3" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-1" date="1637668800">- DESC:update to 4.0.24</changelog>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 4.0.24-2" date="1641556800">- DESC:delete buildrequires of python-nose</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-3" date="1642852800">- DESC:Reposync does not stop downloading packages</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 4.0.24-4" date="1653566400">- DESC: Remove redundant BuildRequires</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.0.24-5" date="1661169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add configfile post-transaction-actions.d</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-1" date="1667476800">- DESC:upgrade dnf-plugins-core version to 4.3.1</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-2" date="1669896000">- DESC:modify incorrect contents in spec file</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-3" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value</changelog>
</package>
<package pkgid="fce93bba7e9a2232c491bdd27b9c7fcc54fc521c1ff6d7348a6b14bcc5ee82ee" name="docker-engine" arch="x86_64">
  <version epoch="2" ver="18.09.0" rel="323.oe2203sp1"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-313" date="1669118400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cleanup netns file when stop docker daemon</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-314" date="1669118401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix dockerd core when release network</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-315" date="1669291200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:using VERSION-vendor to record version</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-316" date="1669896000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not stop health check before sending signal</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-317" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set freezer.state to Thawed to increase freeze chances</changelog>
  <changelog author="Song Zhang&lt;zhangsong34@huawei.com&gt; - 18.09.0-318" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:docker stats: fix 'panic: close of closed channel'</changelog>
  <changelog author="JackChan8&lt;chenjiankun1@huawei.com&gt; - 18.09.0-319" date="1678795200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix container missing after restarting dockerd twice</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-320" date="1678881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try http for docker manifest insecure</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-321" date="1680091200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-323" date="1680782400">- Type:CVE
- CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
- SUG:NA
- DESC:fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842</changelog>
</package>
<package pkgid="f82c794fcafbc036bc5114476469486adaabb5b9b0006ff4d208a1ea053a67b3" name="docker-engine" arch="x86_64">
  <version epoch="2" ver="18.09.0" rel="333.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 18.09.0-324" date="1681905600">- Sync 2203 support loongarch file</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-325" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:thinpool full because docker daemon restart when docker pull</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
</package>
<package pkgid="842f747fc6f89c52ee15de49a441a56d7a9460b8a6a151eacaf83fa897148774" name="docker-engine" arch="x86_64">
  <version epoch="2" ver="18.09.0" rel="334.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-325" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:thinpool full because docker daemon restart when docker pull</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
</package>
<package pkgid="211c072ebebeacd980e7b92fd78263c52bb000dea98708aff518640f46ece10e" name="docker-engine" arch="x86_64">
  <version epoch="2" ver="18.09.0" rel="335.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
</package>
<package pkgid="99d99d9e5d8eeae1b46e171a8a56809fc0c2324a40b1fedbc619efec852c1895" name="docker-engine-debuginfo" arch="x86_64">
  <version epoch="2" ver="18.09.0" rel="323.oe2203sp1"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-313" date="1669118400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cleanup netns file when stop docker daemon</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-314" date="1669118401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix dockerd core when release network</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-315" date="1669291200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:using VERSION-vendor to record version</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-316" date="1669896000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not stop health check before sending signal</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-317" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set freezer.state to Thawed to increase freeze chances</changelog>
  <changelog author="Song Zhang&lt;zhangsong34@huawei.com&gt; - 18.09.0-318" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:docker stats: fix 'panic: close of closed channel'</changelog>
  <changelog author="JackChan8&lt;chenjiankun1@huawei.com&gt; - 18.09.0-319" date="1678795200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix container missing after restarting dockerd twice</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-320" date="1678881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try http for docker manifest insecure</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-321" date="1680091200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-323" date="1680782400">- Type:CVE
- CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
- SUG:NA
- DESC:fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842</changelog>
</package>
<package pkgid="dc76ebe5097cf4c8bfef0138688525770637bcea0870014ef3f60f91d17ab5cb" name="docker-engine-debuginfo" arch="x86_64">
  <version epoch="2" ver="18.09.0" rel="333.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 18.09.0-324" date="1681905600">- Sync 2203 support loongarch file</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-325" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:thinpool full because docker daemon restart when docker pull</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
</package>
<package pkgid="7f8602739fcc643e91dd12be74f224008ee857d9e245ecddcf6fae4b2f1a24e3" name="docker-engine-debuginfo" arch="x86_64">
  <version epoch="2" ver="18.09.0" rel="334.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-325" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:thinpool full because docker daemon restart when docker pull</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
</package>
<package pkgid="53a6ab2b07ce68ed1c57d62906abfdbc0d7c1bde8c66f71a0ae2a835402db19e" name="docker-engine-debuginfo" arch="x86_64">
  <version epoch="2" ver="18.09.0" rel="335.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
</package>
<package pkgid="d0df9802e85dceeefd524cb32ea641071fe3abdebd2db869cc33c0321ae9d8b9" name="docker-engine-debugsource" arch="x86_64">
  <version epoch="2" ver="18.09.0" rel="323.oe2203sp1"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-313" date="1669118400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cleanup netns file when stop docker daemon</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-314" date="1669118401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix dockerd core when release network</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-315" date="1669291200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:using VERSION-vendor to record version</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-316" date="1669896000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not stop health check before sending signal</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-317" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set freezer.state to Thawed to increase freeze chances</changelog>
  <changelog author="Song Zhang&lt;zhangsong34@huawei.com&gt; - 18.09.0-318" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:docker stats: fix 'panic: close of closed channel'</changelog>
  <changelog author="JackChan8&lt;chenjiankun1@huawei.com&gt; - 18.09.0-319" date="1678795200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix container missing after restarting dockerd twice</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-320" date="1678881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try http for docker manifest insecure</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-321" date="1680091200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-323" date="1680782400">- Type:CVE
- CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
- SUG:NA
- DESC:fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842</changelog>
</package>
<package pkgid="c79442599901a34793f60c7b7c59e61a0bfa98ab86a78311f85a0c8fb34b5c4f" name="docker-engine-debugsource" arch="x86_64">
  <version epoch="2" ver="18.09.0" rel="333.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 18.09.0-324" date="1681905600">- Sync 2203 support loongarch file</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-325" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:thinpool full because docker daemon restart when docker pull</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
</package>
<package pkgid="72e37c5e2a77720764cf610bdcb92f309638abe5b32a9070554ea5a3025b88b9" name="docker-engine-debugsource" arch="x86_64">
  <version epoch="2" ver="18.09.0" rel="334.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-325" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:thinpool full because docker daemon restart when docker pull</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
</package>
<package pkgid="62cceb7e5e618a042f4dacad1fbf2913bcede9e6147ece676a5107511aec2459" name="docker-engine-debugsource" arch="x86_64">
  <version epoch="2" ver="18.09.0" rel="335.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
</package>
<package pkgid="14e7bc425a6586ae792bfa99f38361adb9863cecb872cd55f36f2986df898001" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="13.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-4" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move install path to /usr/bin</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-5" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move install path to /usr/bin</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-6" date="1667822400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc log forward to syslog</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-7" date="1671278400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support specify umask</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-8" date="1672920000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify apply-patch path</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-9" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support specify umask</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-10" date="1673956800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify linuxcontainer starttime uint64 type tobe string</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-11" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:make runc spec compatible 1.0.0.rc3</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-12" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libcontainer: skip chown of /dev/null caused by fd redirection</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-13" date="1680609600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix rootless /sys/fs/cgroup mounts bug and Prohibit /proc and /sys to be symlinks</changelog>
</package>
<package pkgid="ab43b5090eac4b279c6940a4f56071bb383fda61a7476479881db7b229cdde1a" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="23.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-15" date="1687348800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-16" date="1695038400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix init error return logic</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-17" date="1697112000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:handle kmem.limit_in_bytes removal</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-18" date="1698148800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix update rt-runtime-us and rt-period-us failed</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-19" date="1698321600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the bug when runc syscall.Exec cmd not exist cause panic</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-20" date="1701691200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc delete do not ignore error from destroy</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-21" date="1702036800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libct: Destroy: don't proceed in case of errors</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-22" date="1703160000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-23" date="1706788800">- Type:CVE
- CVE:CVE-2024-21626
- SUG:NA
- DESC:fix CVE-2024-21626</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-24" date="1707220800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:check cmd exist</changelog>
</package>
<package pkgid="c8c0902d78c45be6e91ab0d737fe0a2acef79ee62b1aa197750c86f4a80dceb6" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="25.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-16" date="1695038400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix init error return logic</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-17" date="1697112000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:handle kmem.limit_in_bytes removal</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-18" date="1698148800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix update rt-runtime-us and rt-period-us failed</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-19" date="1698321600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the bug when runc syscall.Exec cmd not exist cause panic</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-20" date="1701691200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc delete do not ignore error from destroy</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-21" date="1702036800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libct: Destroy: don't proceed in case of errors</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-22" date="1703160000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-23" date="1706788800">- Type:CVE
- CVE:CVE-2024-21626
- SUG:NA
- DESC:fix CVE-2024-21626</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-24" date="1707220800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:check cmd exist</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-25" date="1716552000">- Type:CVE
- CVE:CVE-2024-3154
- SUG:NA
- DESC:fix CVE-2024-3154</changelog>
</package>
<package pkgid="c56ea3af47fb0ba8269610ebfe16488d95cd861bf93702ab29d6b82a11b3eefa" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="9.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.0.0.rc3-303" date="1660046400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:bump version to 303</changelog>
  <changelog author="wangjunqi &lt;wangjunqi@kylinos.cn&gt; - 1.1.3-1" date="1660046401">- update to 1.1.3</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-2" date="1660046402">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change Umask to 0022</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-3" date="1660651200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix systemd cgroup after memory type changed</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-4" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move install path to /usr/bin</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-5" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move install path to /usr/bin</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-6" date="1667822400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc log forward to syslog</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-7" date="1671278400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support specify umask</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-8" date="1672920000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify apply-patch path</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-9" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support specify umask</changelog>
</package>
<package pkgid="382c2cd48ca552d9e00f03b258a8e48e1a479298feecf740275dd339e8335e63" name="dpdk" arch="x86_64">
  <version epoch="0" ver="21.11" rel="42.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-33" date="1676980800">refactor Rc/Tx function of hns3 PMD
 And patchs are as follows:
  - net/hns3: fix burst mode query with dummy function
  - net/hns3: add debug info for Rx/Tx dummy function
  - net/hns3: remove debug condition for Tx prepare
  - net/hns3: separate Tx prepare from getting Tx function
  - net/hns3: make getting Tx function static
  - net/hns3: extract common functions to set Rx/Tx</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-34" date="1677844800">Support flow rule keeping capability for hns3 PMD and
 testpmd. Patchs are as follow:
  - net/hns3: declare flow rule keeping capability
  - app/testpmd: add --disable-flow-flush option</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
</package>
<package pkgid="2319878a861032d3369a9a336ef94c456494442028fd0f889ea4a59486676f0a" name="dpdk" arch="x86_64">
  <version epoch="0" ver="21.11" rel="44.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-43" date="1684929600">Sync some patchs from upstreaming for hns3 pmd and modifies
 are as follow:
 1. support flow control autoneg for fiber port
 2. support simplify hardware checksum offloading
 3. support dump media type
 4. add Tx Rx descriptor logs
 5. fix Rx multiple firmware reset interrupts
 6. ethdev: fix one address occupies two entries in MAC addrs</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-44" date="1685188800">- examples use static libraries to avoid unlinked dynamic libraries</changelog>
</package>
<package pkgid="ffca152d61f4f116748598aa9c6f85391f2ff9c60ef68054c873d41c3c1ce308" name="dpdk" arch="x86_64">
  <version epoch="0" ver="21.11" rel="50.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-49" date="1686657600">- pdump: fix pcap_dump coredump caused by incorrect pkt_len</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-50" date="1687176000">- gro: fix gro with tcp push flag</changelog>
</package>
<package pkgid="3439c08a85d2a4ae38f5a69de2382537b948ecaa48df2361d4ceafae3e78fb2c" name="dpdk" arch="x86_64">
  <version epoch="0" ver="21.11" rel="63.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-54" date="1689422400">- kni: fix build with Linux 6.3/6.5
- remove unused patch intruduced by "fix build with GCC 12"</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-55" date="1689595200">Sync some patchs from upstreaming about add FDIR VLAN match
 mode runtime config and fix doc format for hns3 pmd. Patchs
 are as follow:
 - doc: unify sections of networking drivers guide
 - net/hns3: delete duplicate macro definition
 - net/hns3: add FDIR VLAN match mode runtime config
 - doc: fix kernel patch link in hns3 guide
 - doc: fix syntax in hns3 guide
 - doc: fix number of leading spaces in hns3 guide</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-56" date="1692619200">replace patch-287 to solve the duplicate setting for MAC address.</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 21.11-57" date="1693396800">- Add support for sw_64</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
</package>
<package pkgid="37f0690b0462ee5d689920310fcac5355a77055b84a39601861c6063e1cf7cbf" name="dpdk-debuginfo" arch="x86_64">
  <version epoch="0" ver="21.11" rel="42.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-33" date="1676980800">refactor Rc/Tx function of hns3 PMD
 And patchs are as follows:
  - net/hns3: fix burst mode query with dummy function
  - net/hns3: add debug info for Rx/Tx dummy function
  - net/hns3: remove debug condition for Tx prepare
  - net/hns3: separate Tx prepare from getting Tx function
  - net/hns3: make getting Tx function static
  - net/hns3: extract common functions to set Rx/Tx</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-34" date="1677844800">Support flow rule keeping capability for hns3 PMD and
 testpmd. Patchs are as follow:
  - net/hns3: declare flow rule keeping capability
  - app/testpmd: add --disable-flow-flush option</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
</package>
<package pkgid="05a64c5d9ae534a10eebd679b7f1209e3f209e1797aab96d842645ba314f53a6" name="dpdk-debuginfo" arch="x86_64">
  <version epoch="0" ver="21.11" rel="44.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-43" date="1684929600">Sync some patchs from upstreaming for hns3 pmd and modifies
 are as follow:
 1. support flow control autoneg for fiber port
 2. support simplify hardware checksum offloading
 3. support dump media type
 4. add Tx Rx descriptor logs
 5. fix Rx multiple firmware reset interrupts
 6. ethdev: fix one address occupies two entries in MAC addrs</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-44" date="1685188800">- examples use static libraries to avoid unlinked dynamic libraries</changelog>
</package>
<package pkgid="9207d3fd840067339034910df67a13793c278cbc38e89eb12350cb4fa5cb9a4a" name="dpdk-debuginfo" arch="x86_64">
  <version epoch="0" ver="21.11" rel="50.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-49" date="1686657600">- pdump: fix pcap_dump coredump caused by incorrect pkt_len</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-50" date="1687176000">- gro: fix gro with tcp push flag</changelog>
</package>
<package pkgid="135565308c6612beb0772f125315bef21e164d44fd77816eb61ec28e0ec5f1f3" name="dpdk-debuginfo" arch="x86_64">
  <version epoch="0" ver="21.11" rel="63.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-54" date="1689422400">- kni: fix build with Linux 6.3/6.5
- remove unused patch intruduced by "fix build with GCC 12"</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-55" date="1689595200">Sync some patchs from upstreaming about add FDIR VLAN match
 mode runtime config and fix doc format for hns3 pmd. Patchs
 are as follow:
 - doc: unify sections of networking drivers guide
 - net/hns3: delete duplicate macro definition
 - net/hns3: add FDIR VLAN match mode runtime config
 - doc: fix kernel patch link in hns3 guide
 - doc: fix syntax in hns3 guide
 - doc: fix number of leading spaces in hns3 guide</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-56" date="1692619200">replace patch-287 to solve the duplicate setting for MAC address.</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 21.11-57" date="1693396800">- Add support for sw_64</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
</package>
<package pkgid="a04169e1f9db859fc45bb59d0be5d8508a1af54ab73147c53b2f66fa7b90b4e7" name="dpdk-debugsource" arch="x86_64">
  <version epoch="0" ver="21.11" rel="42.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-33" date="1676980800">refactor Rc/Tx function of hns3 PMD
 And patchs are as follows:
  - net/hns3: fix burst mode query with dummy function
  - net/hns3: add debug info for Rx/Tx dummy function
  - net/hns3: remove debug condition for Tx prepare
  - net/hns3: separate Tx prepare from getting Tx function
  - net/hns3: make getting Tx function static
  - net/hns3: extract common functions to set Rx/Tx</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-34" date="1677844800">Support flow rule keeping capability for hns3 PMD and
 testpmd. Patchs are as follow:
  - net/hns3: declare flow rule keeping capability
  - app/testpmd: add --disable-flow-flush option</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
</package>
<package pkgid="89be0a97047365e382643770ef7610d9ba088f59b94c78ee4426cea82c39a86a" name="dpdk-debugsource" arch="x86_64">
  <version epoch="0" ver="21.11" rel="44.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-43" date="1684929600">Sync some patchs from upstreaming for hns3 pmd and modifies
 are as follow:
 1. support flow control autoneg for fiber port
 2. support simplify hardware checksum offloading
 3. support dump media type
 4. add Tx Rx descriptor logs
 5. fix Rx multiple firmware reset interrupts
 6. ethdev: fix one address occupies two entries in MAC addrs</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-44" date="1685188800">- examples use static libraries to avoid unlinked dynamic libraries</changelog>
</package>
<package pkgid="237c5a07ac3a44727565d3e8db95ee4f767371b02090de84410c653a8c770086" name="dpdk-debugsource" arch="x86_64">
  <version epoch="0" ver="21.11" rel="50.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-49" date="1686657600">- pdump: fix pcap_dump coredump caused by incorrect pkt_len</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-50" date="1687176000">- gro: fix gro with tcp push flag</changelog>
</package>
<package pkgid="5c3ef6d19f5b18d1aea653f481d51d7bd53dcdf421519d46a36e47af78596795" name="dpdk-debugsource" arch="x86_64">
  <version epoch="0" ver="21.11" rel="63.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-54" date="1689422400">- kni: fix build with Linux 6.3/6.5
- remove unused patch intruduced by "fix build with GCC 12"</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-55" date="1689595200">Sync some patchs from upstreaming about add FDIR VLAN match
 mode runtime config and fix doc format for hns3 pmd. Patchs
 are as follow:
 - doc: unify sections of networking drivers guide
 - net/hns3: delete duplicate macro definition
 - net/hns3: add FDIR VLAN match mode runtime config
 - doc: fix kernel patch link in hns3 guide
 - doc: fix syntax in hns3 guide
 - doc: fix number of leading spaces in hns3 guide</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-56" date="1692619200">replace patch-287 to solve the duplicate setting for MAC address.</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 21.11-57" date="1693396800">- Add support for sw_64</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
</package>
<package pkgid="33a9e110dc7d37838960a1ad4d034eeae9634cbdffc61845448166e6cdfd5a92" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="21.11" rel="42.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-33" date="1676980800">refactor Rc/Tx function of hns3 PMD
 And patchs are as follows:
  - net/hns3: fix burst mode query with dummy function
  - net/hns3: add debug info for Rx/Tx dummy function
  - net/hns3: remove debug condition for Tx prepare
  - net/hns3: separate Tx prepare from getting Tx function
  - net/hns3: make getting Tx function static
  - net/hns3: extract common functions to set Rx/Tx</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-34" date="1677844800">Support flow rule keeping capability for hns3 PMD and
 testpmd. Patchs are as follow:
  - net/hns3: declare flow rule keeping capability
  - app/testpmd: add --disable-flow-flush option</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
</package>
<package pkgid="3d429bb3714ea4f267496e7b8e9b8a1f68619f0e0d492464e45098a4db58485e" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="21.11" rel="44.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-43" date="1684929600">Sync some patchs from upstreaming for hns3 pmd and modifies
 are as follow:
 1. support flow control autoneg for fiber port
 2. support simplify hardware checksum offloading
 3. support dump media type
 4. add Tx Rx descriptor logs
 5. fix Rx multiple firmware reset interrupts
 6. ethdev: fix one address occupies two entries in MAC addrs</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-44" date="1685188800">- examples use static libraries to avoid unlinked dynamic libraries</changelog>
</package>
<package pkgid="de1cfc97d592422d2e1c3736233dde4f73a0cb19d83f4fd656727bb0a336d590" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="21.11" rel="50.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-49" date="1686657600">- pdump: fix pcap_dump coredump caused by incorrect pkt_len</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-50" date="1687176000">- gro: fix gro with tcp push flag</changelog>
</package>
<package pkgid="42d0771b449bf6df7e3d614118e44d382fb75412fec8cec04ae236ac1530494f" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="21.11" rel="63.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-54" date="1689422400">- kni: fix build with Linux 6.3/6.5
- remove unused patch intruduced by "fix build with GCC 12"</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-55" date="1689595200">Sync some patchs from upstreaming about add FDIR VLAN match
 mode runtime config and fix doc format for hns3 pmd. Patchs
 are as follow:
 - doc: unify sections of networking drivers guide
 - net/hns3: delete duplicate macro definition
 - net/hns3: add FDIR VLAN match mode runtime config
 - doc: fix kernel patch link in hns3 guide
 - doc: fix syntax in hns3 guide
 - doc: fix number of leading spaces in hns3 guide</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-56" date="1692619200">replace patch-287 to solve the duplicate setting for MAC address.</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 21.11-57" date="1693396800">- Add support for sw_64</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
</package>
<package pkgid="c2a60990b8552128bf07c83da066be7dfc18f30dccd92f3b5aeeb5c0c46380cd" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="21.11" rel="42.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-33" date="1676980800">refactor Rc/Tx function of hns3 PMD
 And patchs are as follows:
  - net/hns3: fix burst mode query with dummy function
  - net/hns3: add debug info for Rx/Tx dummy function
  - net/hns3: remove debug condition for Tx prepare
  - net/hns3: separate Tx prepare from getting Tx function
  - net/hns3: make getting Tx function static
  - net/hns3: extract common functions to set Rx/Tx</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-34" date="1677844800">Support flow rule keeping capability for hns3 PMD and
 testpmd. Patchs are as follow:
  - net/hns3: declare flow rule keeping capability
  - app/testpmd: add --disable-flow-flush option</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
</package>
<package pkgid="2a50f06dadce6282c4bf472d9fc5032cd31da563351cb0a9de73d4cea029b518" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="21.11" rel="44.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-43" date="1684929600">Sync some patchs from upstreaming for hns3 pmd and modifies
 are as follow:
 1. support flow control autoneg for fiber port
 2. support simplify hardware checksum offloading
 3. support dump media type
 4. add Tx Rx descriptor logs
 5. fix Rx multiple firmware reset interrupts
 6. ethdev: fix one address occupies two entries in MAC addrs</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-44" date="1685188800">- examples use static libraries to avoid unlinked dynamic libraries</changelog>
</package>
<package pkgid="871076ff6ac505e82e377d0f9b3265c7f2e2db55ae7361e806dd6113503877c6" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="21.11" rel="50.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-49" date="1686657600">- pdump: fix pcap_dump coredump caused by incorrect pkt_len</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-50" date="1687176000">- gro: fix gro with tcp push flag</changelog>
</package>
<package pkgid="c053abd7dc74515e83c241fc336c52da8692c9fa57ee2f652d9981b0901a60ef" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="21.11" rel="63.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-54" date="1689422400">- kni: fix build with Linux 6.3/6.5
- remove unused patch intruduced by "fix build with GCC 12"</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-55" date="1689595200">Sync some patchs from upstreaming about add FDIR VLAN match
 mode runtime config and fix doc format for hns3 pmd. Patchs
 are as follow:
 - doc: unify sections of networking drivers guide
 - net/hns3: delete duplicate macro definition
 - net/hns3: add FDIR VLAN match mode runtime config
 - doc: fix kernel patch link in hns3 guide
 - doc: fix syntax in hns3 guide
 - doc: fix number of leading spaces in hns3 guide</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-56" date="1692619200">replace patch-287 to solve the duplicate setting for MAC address.</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 21.11-57" date="1693396800">- Add support for sw_64</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
</package>
<package pkgid="c549c40d9bdff6a71ff90c27778e132c15c337af90e582bc390508aec47c8b24" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="21.11" rel="42.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-33" date="1676980800">refactor Rc/Tx function of hns3 PMD
 And patchs are as follows:
  - net/hns3: fix burst mode query with dummy function
  - net/hns3: add debug info for Rx/Tx dummy function
  - net/hns3: remove debug condition for Tx prepare
  - net/hns3: separate Tx prepare from getting Tx function
  - net/hns3: make getting Tx function static
  - net/hns3: extract common functions to set Rx/Tx</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-34" date="1677844800">Support flow rule keeping capability for hns3 PMD and
 testpmd. Patchs are as follow:
  - net/hns3: declare flow rule keeping capability
  - app/testpmd: add --disable-flow-flush option</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
</package>
<package pkgid="fa86c5cf21aec3a7508acdb184e0ef815282d05fe7abffa7824b5050bbe723ba" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="21.11" rel="44.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-43" date="1684929600">Sync some patchs from upstreaming for hns3 pmd and modifies
 are as follow:
 1. support flow control autoneg for fiber port
 2. support simplify hardware checksum offloading
 3. support dump media type
 4. add Tx Rx descriptor logs
 5. fix Rx multiple firmware reset interrupts
 6. ethdev: fix one address occupies two entries in MAC addrs</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-44" date="1685188800">- examples use static libraries to avoid unlinked dynamic libraries</changelog>
</package>
<package pkgid="7a30df6e0174063e9fe1540678aedfa50a1b1c567e03d5687afda170107e24e7" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="21.11" rel="50.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-49" date="1686657600">- pdump: fix pcap_dump coredump caused by incorrect pkt_len</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-50" date="1687176000">- gro: fix gro with tcp push flag</changelog>
</package>
<package pkgid="2dccd9d565ad6af0053e61f9572468afdbe36041fb0cd9696f6380ecff12b230" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="21.11" rel="63.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-54" date="1689422400">- kni: fix build with Linux 6.3/6.5
- remove unused patch intruduced by "fix build with GCC 12"</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-55" date="1689595200">Sync some patchs from upstreaming about add FDIR VLAN match
 mode runtime config and fix doc format for hns3 pmd. Patchs
 are as follow:
 - doc: unify sections of networking drivers guide
 - net/hns3: delete duplicate macro definition
 - net/hns3: add FDIR VLAN match mode runtime config
 - doc: fix kernel patch link in hns3 guide
 - doc: fix syntax in hns3 guide
 - doc: fix number of leading spaces in hns3 guide</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-56" date="1692619200">replace patch-287 to solve the duplicate setting for MAC address.</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 21.11-57" date="1693396800">- Add support for sw_64</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
</package>
<package pkgid="0536df7368a38d8ba2117f0ff3e9bea7c435e63974fb044c4610f2ee6c10fd29" name="dpu-utilities-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3" rel="1.oe2203sp1"/>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-1" date="1660305600">- First Spec Version Include qtfs shared filesystem Driver Code</changelog>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-2" date="1660737600">- Split dpu-utilities into three packages.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-1" date="1669636800">- Upgrade dpu-utilities version to 1.1</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-2" date="1669896000">- add path put in xattr set</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-3" date="1670500800">- Sync patches from master</changelog>
  <changelog author="YangXin &lt;245051644@qq.com&gt; 1.1-4" date="1671105600">- Fix inode sync error between client and server.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.3-1" date="1679400000">- Upgrade dpu-utilities version to 1.3</changelog>
</package>
<package pkgid="9ddb1aee1dc0d4f925be327366b0e1cc4876e6ca863b3b9c43ace22424e626e6" name="dpu-utilities-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4" rel="2.oe2203sp1"/>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-1" date="1660305600">- First Spec Version Include qtfs shared filesystem Driver Code</changelog>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-2" date="1660737600">- Split dpu-utilities into three packages.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-1" date="1669636800">- Upgrade dpu-utilities version to 1.1</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-2" date="1669896000">- add path put in xattr set</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-3" date="1670500800">- Sync patches from master</changelog>
  <changelog author="YangXin &lt;245051644@qq.com&gt; 1.1-4" date="1671105600">- Fix inode sync error between client and server.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.3-1" date="1679400000">- Upgrade dpu-utilities version to 1.3</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.4-1" date="1685707200">- Upgrade dpu-utilities version to 1.4</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.4-2" date="1686571200">- Sync patches from source</changelog>
</package>
<package pkgid="2c37173aad6b464db9170349db90dd55b8ed6d4cb6d170f4791de67df451e7b8" name="dpu-utilities-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3" rel="1.oe2203sp1"/>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-1" date="1660305600">- First Spec Version Include qtfs shared filesystem Driver Code</changelog>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-2" date="1660737600">- Split dpu-utilities into three packages.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-1" date="1669636800">- Upgrade dpu-utilities version to 1.1</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-2" date="1669896000">- add path put in xattr set</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-3" date="1670500800">- Sync patches from master</changelog>
  <changelog author="YangXin &lt;245051644@qq.com&gt; 1.1-4" date="1671105600">- Fix inode sync error between client and server.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.3-1" date="1679400000">- Upgrade dpu-utilities version to 1.3</changelog>
</package>
<package pkgid="f0879e154b52193602631823d4b0a020e7bfce65f60a05cf4ecb355bafcc8572" name="dpu-utilities-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4" rel="2.oe2203sp1"/>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-1" date="1660305600">- First Spec Version Include qtfs shared filesystem Driver Code</changelog>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-2" date="1660737600">- Split dpu-utilities into three packages.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-1" date="1669636800">- Upgrade dpu-utilities version to 1.1</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-2" date="1669896000">- add path put in xattr set</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-3" date="1670500800">- Sync patches from master</changelog>
  <changelog author="YangXin &lt;245051644@qq.com&gt; 1.1-4" date="1671105600">- Fix inode sync error between client and server.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.3-1" date="1679400000">- Upgrade dpu-utilities version to 1.3</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.4-1" date="1685707200">- Upgrade dpu-utilities version to 1.4</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.4-2" date="1686571200">- Sync patches from source</changelog>
</package>
<package pkgid="1e3eac6c055b914b49d29548e0671e0bb2529c80c776e75a4522bc6798532e09" name="dpuos-imageTailor-config" arch="x86_64">
  <version epoch="0" ver="1.3" rel="1.oe2203sp1"/>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-1" date="1660305600">- First Spec Version Include qtfs shared filesystem Driver Code</changelog>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-2" date="1660737600">- Split dpu-utilities into three packages.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-1" date="1669636800">- Upgrade dpu-utilities version to 1.1</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-2" date="1669896000">- add path put in xattr set</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-3" date="1670500800">- Sync patches from master</changelog>
  <changelog author="YangXin &lt;245051644@qq.com&gt; 1.1-4" date="1671105600">- Fix inode sync error between client and server.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.3-1" date="1679400000">- Upgrade dpu-utilities version to 1.3</changelog>
</package>
<package pkgid="3191fd4d05e6f47b05e71a67ffde095e4dd0469b5102c84253675db84f321b12" name="dpuos-imageTailor-config" arch="x86_64">
  <version epoch="0" ver="1.4" rel="2.oe2203sp1"/>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-1" date="1660305600">- First Spec Version Include qtfs shared filesystem Driver Code</changelog>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-2" date="1660737600">- Split dpu-utilities into three packages.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-1" date="1669636800">- Upgrade dpu-utilities version to 1.1</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-2" date="1669896000">- add path put in xattr set</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-3" date="1670500800">- Sync patches from master</changelog>
  <changelog author="YangXin &lt;245051644@qq.com&gt; 1.1-4" date="1671105600">- Fix inode sync error between client and server.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.3-1" date="1679400000">- Upgrade dpu-utilities version to 1.3</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.4-1" date="1685707200">- Upgrade dpu-utilities version to 1.4</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.4-2" date="1686571200">- Sync patches from source</changelog>
</package>
<package pkgid="f2fbf8214371139cd18bbe68c693dc3baf889d9b8791ed7e17ba7a9628889872" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="21.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.46.4-12" date="1656072000">- add sw64 patch</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-13" date="1660305600">- tune2fs: do not change j_tail_sequence in journal superblock</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-14" date="1660996800">- debugfs: teach logdump the -n &lt;num_trans&gt; option</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-15" date="1663934400">- test: fix ACL-printing tests from community</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-16" date="1665748800">- tune2fs: fix segfault problem</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-17" date="1669896000">- fix deadlock problem in unix_write_blk64</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 1.46.4-18" date="1675944000">- Upstream patches regress for debugfs, tune2fs and mmp.</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-19" date="1680177600">- backport one patch to fix: processes may kill other processes in misc/fsck.c</changelog>
  <changelog author="tangyuchen &lt;tangyuchen5@huawei.com&gt; - 1.46.4-20" date="1686312000">- delete invalid link for ext4</changelog>
  <changelog author="suweifeng &lt;suweifeng1@huawei.com&gt; - 1.46.4-21" date="1687694400">- backport patches from upstream</changelog>
</package>
<package pkgid="dd193c74056e86febdd96eeabe053cbc837411d9f099623e3bdefac8922f37e5" name="e2fsprogs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="21.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.46.4-12" date="1656072000">- add sw64 patch</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-13" date="1660305600">- tune2fs: do not change j_tail_sequence in journal superblock</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-14" date="1660996800">- debugfs: teach logdump the -n &lt;num_trans&gt; option</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-15" date="1663934400">- test: fix ACL-printing tests from community</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-16" date="1665748800">- tune2fs: fix segfault problem</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-17" date="1669896000">- fix deadlock problem in unix_write_blk64</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 1.46.4-18" date="1675944000">- Upstream patches regress for debugfs, tune2fs and mmp.</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-19" date="1680177600">- backport one patch to fix: processes may kill other processes in misc/fsck.c</changelog>
  <changelog author="tangyuchen &lt;tangyuchen5@huawei.com&gt; - 1.46.4-20" date="1686312000">- delete invalid link for ext4</changelog>
  <changelog author="suweifeng &lt;suweifeng1@huawei.com&gt; - 1.46.4-21" date="1687694400">- backport patches from upstream</changelog>
</package>
<package pkgid="7bf8bd93f17a068371efc8c0d63b0e9a541b7b1bdf42a1698da27c9456c0bda9" name="e2fsprogs-debugsource" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="21.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.46.4-12" date="1656072000">- add sw64 patch</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-13" date="1660305600">- tune2fs: do not change j_tail_sequence in journal superblock</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-14" date="1660996800">- debugfs: teach logdump the -n &lt;num_trans&gt; option</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-15" date="1663934400">- test: fix ACL-printing tests from community</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-16" date="1665748800">- tune2fs: fix segfault problem</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-17" date="1669896000">- fix deadlock problem in unix_write_blk64</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 1.46.4-18" date="1675944000">- Upstream patches regress for debugfs, tune2fs and mmp.</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-19" date="1680177600">- backport one patch to fix: processes may kill other processes in misc/fsck.c</changelog>
  <changelog author="tangyuchen &lt;tangyuchen5@huawei.com&gt; - 1.46.4-20" date="1686312000">- delete invalid link for ext4</changelog>
  <changelog author="suweifeng &lt;suweifeng1@huawei.com&gt; - 1.46.4-21" date="1687694400">- backport patches from upstream</changelog>
</package>
<package pkgid="e7111a8d21fa37ce651a3dd06bbf18fc4bffe00af185c0ed70ba2af20bd6bd0c" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="21.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.46.4-12" date="1656072000">- add sw64 patch</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-13" date="1660305600">- tune2fs: do not change j_tail_sequence in journal superblock</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-14" date="1660996800">- debugfs: teach logdump the -n &lt;num_trans&gt; option</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-15" date="1663934400">- test: fix ACL-printing tests from community</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-16" date="1665748800">- tune2fs: fix segfault problem</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-17" date="1669896000">- fix deadlock problem in unix_write_blk64</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 1.46.4-18" date="1675944000">- Upstream patches regress for debugfs, tune2fs and mmp.</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-19" date="1680177600">- backport one patch to fix: processes may kill other processes in misc/fsck.c</changelog>
  <changelog author="tangyuchen &lt;tangyuchen5@huawei.com&gt; - 1.46.4-20" date="1686312000">- delete invalid link for ext4</changelog>
  <changelog author="suweifeng &lt;suweifeng1@huawei.com&gt; - 1.46.4-21" date="1687694400">- backport patches from upstream</changelog>
</package>
<package pkgid="76b2e08353af71b74ef762dc6e091567cd5968af50f31a3cea566a6f266518ab" name="e2fsprogs-help" arch="noarch">
  <version epoch="0" ver="1.46.4" rel="21.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.46.4-12" date="1656072000">- add sw64 patch</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-13" date="1660305600">- tune2fs: do not change j_tail_sequence in journal superblock</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-14" date="1660996800">- debugfs: teach logdump the -n &lt;num_trans&gt; option</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-15" date="1663934400">- test: fix ACL-printing tests from community</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-16" date="1665748800">- tune2fs: fix segfault problem</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-17" date="1669896000">- fix deadlock problem in unix_write_blk64</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 1.46.4-18" date="1675944000">- Upstream patches regress for debugfs, tune2fs and mmp.</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-19" date="1680177600">- backport one patch to fix: processes may kill other processes in misc/fsck.c</changelog>
  <changelog author="tangyuchen &lt;tangyuchen5@huawei.com&gt; - 1.46.4-20" date="1686312000">- delete invalid link for ext4</changelog>
  <changelog author="suweifeng &lt;suweifeng1@huawei.com&gt; - 1.46.4-21" date="1687694400">- backport patches from upstream</changelog>
</package>
<package pkgid="9b32d5a5d2810e0f9ca52ce6750c570b51977adf9de09f242439017bff11a14c" name="ebtables" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="10.oe2203sp1"/>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
</package>
<package pkgid="ae48b06dcf2eb3b76e0399520c52754bcc03f942b9a2124a3cfd88b9a6e45c2b" name="ebtables" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="9.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.0.11-2" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of ebtables</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
</package>
<package pkgid="3faedfa0fb6fb61e4ee0df54165f3db27025ed5785f5624a59bd9c31c9c6a808" name="ebtables-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="10.oe2203sp1"/>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
</package>
<package pkgid="9fb7a81a1d105506f703e489a1e64f8c327a8a89e9f610081d54eaf7f449071c" name="ebtables-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="9.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.0.11-2" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of ebtables</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
</package>
<package pkgid="9f07ab45cab5c208af119518b52b836948ad226e20b4d5dc045e929608fc414d" name="ebtables-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="10.oe2203sp1"/>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
</package>
<package pkgid="046e4d0cfc7290cc2ff326c074d21cb5b089d5b87a1372b5b0c9c4bd6195a310" name="ebtables-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="9.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.0.11-2" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of ebtables</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
</package>
<package pkgid="fd107341a5b61951ba6505e866017775c06b94a572c1b25cf92b9d6a4f9a043d" name="ebtables-help" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="10.oe2203sp1"/>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
</package>
<package pkgid="d3ab5e6b8ea43ab6fb7f5ad74d6b1fcd6a295411d5f5fc2cb8667c90020a2ce6" name="ebtables-help" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="9.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.0.11-2" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of ebtables</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
</package>
<package pkgid="3df74e6b611a8c0840fcae12408344e076df545921e080c3b7d3b83cc7f34d7a" name="edk2-debuginfo" arch="x86_64">
  <version epoch="0" ver="202011" rel="11.oe2203sp1"/>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-2" date="1644926400">- fix CVE-2021-38576</changelog>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-3" date="1645099200">- OvmfPkg: VirtioNetDxe: Extend the RxBufferSize to avoid data truncation</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 202011-4" date="1651060800">- update the format of changelog</changelog>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
</package>
<package pkgid="60eb65fcca987df09f0c9bfc4d266f39b84085fede8b16587370ec7c4804b684" name="edk2-debuginfo" arch="x86_64">
  <version epoch="0" ver="202011" rel="12.oe2203sp1"/>
</package>
<package pkgid="a46e4a4af41f62a0d99926c0791a3661c890e0e326d553c14dc7e5705f307a0b" name="edk2-debuginfo" arch="x86_64">
  <version epoch="0" ver="202011" rel="14.oe2203sp1"/>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
</package>
<package pkgid="c77fc4c334544aa92e1b5ba9ab9d9b217729fdcf188395ba94f144c512380234" name="edk2-debuginfo" arch="x86_64">
  <version epoch="0" ver="202011" rel="16.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
</package>
<package pkgid="513474b7c33d6c3305cce405678fd7c871d6a5538e5603ca26a2b4b1c3855c6e" name="edk2-debuginfo" arch="x86_64">
  <version epoch="0" ver="202011" rel="17.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="ad5b2e4e77e5ec1a7a9c25ba338f9a3160c1fb31ea506a77422dbd11c47c4421" name="edk2-debugsource" arch="x86_64">
  <version epoch="0" ver="202011" rel="11.oe2203sp1"/>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-2" date="1644926400">- fix CVE-2021-38576</changelog>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-3" date="1645099200">- OvmfPkg: VirtioNetDxe: Extend the RxBufferSize to avoid data truncation</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 202011-4" date="1651060800">- update the format of changelog</changelog>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
</package>
<package pkgid="d26a3ce6f85ab7980035ab18ae78595acf1d8c52c87c701de3fb543e3b336a24" name="edk2-debugsource" arch="x86_64">
  <version epoch="0" ver="202011" rel="12.oe2203sp1"/>
</package>
<package pkgid="5e12ad5083bfc3186da0807b136b338b4009f202a075b3ee20214e00de18c3d8" name="edk2-debugsource" arch="x86_64">
  <version epoch="0" ver="202011" rel="14.oe2203sp1"/>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
</package>
<package pkgid="ec57754f3fc2bcee27843406080e40a54328996c025fcf81d10094d979058852" name="edk2-debugsource" arch="x86_64">
  <version epoch="0" ver="202011" rel="16.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
</package>
<package pkgid="fd2d94c0e7449da170cd5cfcb02f21a9e33b336b0714246c7f6c04533caf0886" name="edk2-debugsource" arch="x86_64">
  <version epoch="0" ver="202011" rel="17.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="dba2939ba60d3ef11606d9c036e5753b4787bb40c468ecd77708dda88f27eb1c" name="edk2-devel" arch="x86_64">
  <version epoch="0" ver="202011" rel="11.oe2203sp1"/>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-2" date="1644926400">- fix CVE-2021-38576</changelog>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-3" date="1645099200">- OvmfPkg: VirtioNetDxe: Extend the RxBufferSize to avoid data truncation</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 202011-4" date="1651060800">- update the format of changelog</changelog>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
</package>
<package pkgid="a39d8ae9f7236ff7767a92fe1f3dcfcc89a66f30f6293d062b23563d041cdabb" name="edk2-devel" arch="x86_64">
  <version epoch="0" ver="202011" rel="12.oe2203sp1"/>
</package>
<package pkgid="a4db22202fe2be044c643cb0771f4467358b3d44205663bedcd1c954b9871e80" name="edk2-devel" arch="x86_64">
  <version epoch="0" ver="202011" rel="14.oe2203sp1"/>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
</package>
<package pkgid="1ddb23a6877938cf4a4fbda54235ebba48d9050e3cf9fc4467ff8756faa301d2" name="edk2-devel" arch="x86_64">
  <version epoch="0" ver="202011" rel="16.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
</package>
<package pkgid="4b9b8ef20e6a165fe0ffce401ccc3da1774d218131d6cc1a2075950ed251c28f" name="edk2-devel" arch="x86_64">
  <version epoch="0" ver="202011" rel="17.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="461225f2fb753fd97b5defc27aa88f50b7e2adee2312dc83965efab3e0fc8cc3" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="11.oe2203sp1"/>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-2" date="1644926400">- fix CVE-2021-38576</changelog>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-3" date="1645099200">- OvmfPkg: VirtioNetDxe: Extend the RxBufferSize to avoid data truncation</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 202011-4" date="1651060800">- update the format of changelog</changelog>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
</package>
<package pkgid="178c9f9120761e5b55e7d1f6f5043ab033bd13f9a9b25e7bcce10484133a6da3" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="12.oe2203sp1"/>
</package>
<package pkgid="0fc24d3c871e0459cc409c1a128ce71cac7314a36c7511924b84fecd97c6a3c0" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="14.oe2203sp1"/>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
</package>
<package pkgid="ef3808217734a6a87056d1eda7fb9ac1edc5a535664603d21f60e89fb7cae126" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="16.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
</package>
<package pkgid="213f1991dafba9414ca161e3ee4e17b6d70496136974b40ae882809d6b6c898a" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="17.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="33a9cf95ec6e44dede6c82365c42fbd96d6a67ebe962ffec42c42bc78a6fccde" name="edk2-ovmf" arch="noarch">
  <version epoch="0" ver="202011" rel="11.oe2203sp1"/>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-2" date="1644926400">- fix CVE-2021-38576</changelog>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-3" date="1645099200">- OvmfPkg: VirtioNetDxe: Extend the RxBufferSize to avoid data truncation</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 202011-4" date="1651060800">- update the format of changelog</changelog>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
</package>
<package pkgid="5daec25dba2414af279036906dd55902e3afa89da65684af4b2d0179fa9897fa" name="edk2-ovmf" arch="noarch">
  <version epoch="0" ver="202011" rel="12.oe2203sp1"/>
</package>
<package pkgid="d7892cc70c0bd67eb0cb394d88cf95c084806859e209ae8bdf831004d671629f" name="edk2-ovmf" arch="noarch">
  <version epoch="0" ver="202011" rel="14.oe2203sp1"/>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
</package>
<package pkgid="806b23f880824ffad06f69173880e61ad77ffc097f51f8a7e2109da017dd22c8" name="edk2-ovmf" arch="noarch">
  <version epoch="0" ver="202011" rel="16.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
</package>
<package pkgid="ff98fb2bba110c7ac1da11f277c06864b246484c48e4f7879ba98cd3d1f7c34a" name="edk2-ovmf" arch="noarch">
  <version epoch="0" ver="202011" rel="17.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="661ac8ff69b685bcc410885a4929272a729aae76275befb81dbe63c87d79ea27" name="efibootmgr" arch="x86_64">
  <version epoch="0" ver="18" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
</package>
<package pkgid="1b3aff22dc589a1f7556c75f9063ba549678fb27caf7f07af041273900911d08" name="efibootmgr" arch="x86_64">
  <version epoch="0" ver="18" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-4" date="1678708800">- Fix segfault when passed --index is greater than current boot order size
  Add missing short option handling for --index (-I)</changelog>
</package>
<package pkgid="fe6209da52f02000d13f2895ece3b9005cc3bb131a74ea5f43cd3132e7362086" name="efibootmgr-debuginfo" arch="x86_64">
  <version epoch="0" ver="18" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
</package>
<package pkgid="549fbfe120d76ffe37abe64dae24c29ca020eb82da7e070b9a773c27887cac9a" name="efibootmgr-debuginfo" arch="x86_64">
  <version epoch="0" ver="18" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-4" date="1678708800">- Fix segfault when passed --index is greater than current boot order size
  Add missing short option handling for --index (-I)</changelog>
</package>
<package pkgid="8afce55b03ed9b1403b1beedec2e3e41937b801b3d23906e515f83d3bbe511a6" name="efibootmgr-debugsource" arch="x86_64">
  <version epoch="0" ver="18" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
</package>
<package pkgid="9a340c600996dcb577170817f5071bc79d5aca2f593a05b78ed9fe8b66f469da" name="efibootmgr-debugsource" arch="x86_64">
  <version epoch="0" ver="18" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-4" date="1678708800">- Fix segfault when passed --index is greater than current boot order size
  Add missing short option handling for --index (-I)</changelog>
</package>
<package pkgid="b95cf210968a514a551c5359ca1d66e417c1bf43e51b4e78f560196ccbbd2de0" name="efibootmgr-help" arch="x86_64">
  <version epoch="0" ver="18" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
</package>
<package pkgid="c521f25b650dca305c1db9c545e46ad2a8dffba52d3d421b7c635f971b8655e9" name="efibootmgr-help" arch="x86_64">
  <version epoch="0" ver="18" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-4" date="1678708800">- Fix segfault when passed --index is greater than current boot order size
  Add missing short option handling for --index (-I)</changelog>
</package>
<package pkgid="75e7319a15580291213ff5ff3c2f9e0000566219061aad33ac301ac8bc43f3fe" name="efivar" arch="x86_64">
  <version epoch="0" ver="38" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
</package>
<package pkgid="2d379211ce7221a23faf3520d8ae7f255f8db2bf0f5e358c37b34a028df2b0fa" name="efivar" arch="x86_64">
  <version epoch="0" ver="38" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-4" date="1710331200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix invalid free in main()</changelog>
</package>
<package pkgid="d9cd69e7a3bec7f5464e0599594ea6d429124d6615a4c1691e437f081f2b37b3" name="efivar-debuginfo" arch="x86_64">
  <version epoch="0" ver="38" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
</package>
<package pkgid="6ba4ab13ba838ac9a6ff9a2e6d89f651145bab4641cd20694ccad4e0a0b2dfca" name="efivar-debuginfo" arch="x86_64">
  <version epoch="0" ver="38" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-4" date="1710331200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix invalid free in main()</changelog>
</package>
<package pkgid="125be0f7c7dd1298dd0454c3cac45d628772967ade25203a9b095efdb2e96390" name="efivar-debugsource" arch="x86_64">
  <version epoch="0" ver="38" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
</package>
<package pkgid="7d3921580d0fefd141aa1a41c985df67871df0a06c3900345dba1c9989e231f3" name="efivar-debugsource" arch="x86_64">
  <version epoch="0" ver="38" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-4" date="1710331200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix invalid free in main()</changelog>
</package>
<package pkgid="bf5ae8972a42f6844da28d7d6f373a7ba6c95379a18162dfd5691a68298c890f" name="efivar-devel" arch="x86_64">
  <version epoch="0" ver="38" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
</package>
<package pkgid="15c4fe6d0c40b144250f47d91f7788aaa524eb3cc8d777ee0cd37db2dff773ab" name="efivar-devel" arch="x86_64">
  <version epoch="0" ver="38" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-4" date="1710331200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix invalid free in main()</changelog>
</package>
<package pkgid="30d8686ac5e1d5ddd52a8990e9d73503141fb52b47970520369ebca6d1cc4ea0" name="efivar-help" arch="noarch">
  <version epoch="0" ver="38" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
</package>
<package pkgid="a3a082509b558f29bc2170b7bf21ab53f0d0186c4476d9884c91ea6f3dcf74d8" name="efivar-help" arch="noarch">
  <version epoch="0" ver="38" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-4" date="1710331200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix invalid free in main()</changelog>
</package>
<package pkgid="9fec629df65b597586702bd01b30a4538f19dda616075c188cf78bac0aa6eab9" name="efivar-libs" arch="x86_64">
  <version epoch="0" ver="38" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
</package>
<package pkgid="bb8402d091c7bdca2f7b5107ffab44e00d5c5ced4eb2dc8ca040ea7419cc2a26" name="efivar-libs" arch="x86_64">
  <version epoch="0" ver="38" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-4" date="1710331200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix invalid free in main()</changelog>
</package>
<package pkgid="f6a5c188c1db1854df722a0d23fa024cb57f8e88891a1b772fe156b5376c47c3" name="emacs" arch="x86_64">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="959644ca8d304552f0b725ea26d89efdffde0b16ab5cd997a95c49fc3b4c2509" name="emacs" arch="x86_64">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="b0263b680f4efb7963882f00cc1937f87ab5de7bf0cc717472aec833e2704660" name="emacs" arch="x86_64">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="187307020f48d608d290ae0c2b6f15dddef8093c9e3ee593221e189cb04ff47d" name="emacs-common" arch="x86_64">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="6c818cdc8373db58547ad00b58d93c871292bac39f125de05b8903e27d121313" name="emacs-common" arch="x86_64">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="c6ece210631794d5317eb5ba08c8638d9e93883d1bdd00a37273e6b0dd899bda" name="emacs-common" arch="x86_64">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="4588ef4d5e517a167e653a3ae52694ab3ed0066574cf3f7fadb22656b5ba90ce" name="emacs-debuginfo" arch="x86_64">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="6b782780472821c72e3959221484a4d5f295b8225fd2e3aa0f275393bd329722" name="emacs-debuginfo" arch="x86_64">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="4fe7eaa8cdd2fd137d03c88f7e5ec6121d01c5736dd355413beb2d80d0a7de19" name="emacs-debuginfo" arch="x86_64">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="8f4d125d11da580ce78f49d32631eefaf3194614c2603acf848ada119e4e6115" name="emacs-debugsource" arch="x86_64">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="cc77a120f3ef60c75e737865f6475cb4740ef92913b4f6ead4b816a7589ab184" name="emacs-debugsource" arch="x86_64">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="a242c565d0c588f97fde5cc29b55d5173d64ea2558728fa6a4a4a833eb1ce985" name="emacs-debugsource" arch="x86_64">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="b95627cb697dd02cdd20ee75714571d3ba1a909ade7a4f35ef0b8a7348507a53" name="emacs-devel" arch="x86_64">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="c255108c4382bad7548e06b116ae2fc57791da49000a8517e288e9381b7ce7be" name="emacs-devel" arch="x86_64">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="adfdd106d8246758dc10af7dee4981e34a283ea4dd26b409354901d5c2fb312d" name="emacs-devel" arch="x86_64">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="0f3458fb4da7bd94fac664feaedf6df1831cf55a3fda24a7510082ced3fcd0b7" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="91b0c67d23156cbcb97c8b3c9dfb66030f6714dc97f3a0311e0cd4792f610bdd" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="6f24042b45b95c90fbfe96705b96880044f9d9f4905f1106eea41b851b379622" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="307bfec7f6b7abaf6dd2402a3c369b7500f0b665a7ca4102e4f4fe7bcee9aa9d" name="emacs-help" arch="noarch">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="4ec148f4a1c3e3e516a942b369ce76434e760d68122e2864a795c585d1206f85" name="emacs-help" arch="noarch">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="3258b86d65fb9fb554bed4914607a223b5c3d26fa2782e6ba3ac88be28b9c1b0" name="emacs-help" arch="noarch">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="8f078ad9017f5d975c4b595d8e04a0ad9faff4d98d6718800d9342e334f34fbd" name="emacs-lucid" arch="x86_64">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="8afbd762fade0e2bbbecd539e219565d5dcc53da094f45136f550caa11e6215b" name="emacs-lucid" arch="x86_64">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="bf68b402500ca3384406b8dfee34918f35a735a70e02efaf5b35b9f02501b507" name="emacs-lucid" arch="x86_64">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="96b9cdd631cd07b80e7e52cb96edd61f56e599906e1456ad0e5b8683b4056ad8" name="emacs-nox" arch="x86_64">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="cbe4d6fda70defb9282d812fbbb17a6dbe29b22bac96b6b0a870c9f2bfdecb13" name="emacs-nox" arch="x86_64">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="0d4bb4d3dda13fce446d7db1a92a5d92555113f9207b2bec9f47c6be1a8b1fff" name="emacs-nox" arch="x86_64">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="e863eb22ee7f974d7e5d058d2a9d4299bb00668c4acdf14d6e73fb2a0a67da09" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="1c2ccfc91013f4df8fcfd9f38dfb0f9e8a1d4796fc7f0d84eacfead307ea229d" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="7a45041ef67808ead577c3547107aaf7ad765b972c00f82559c4894f96fe5bae" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="d83d193fca49fff1cb9239f7fcff473d520c5d844501a3e29df2b0fd6d821596" name="epiphany" arch="x86_64">
  <version epoch="1" ver="40.6" rel="3.oe2203sp1"/>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.5-1" date="1624536000">- Update to 3.38.5</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 3.38.5-2" date="1631275200">- Delete rpath setting</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 40.6-1" date="1651838400">- Update to 40.6 for fix CVE-2021-45085-to-CVE-2021-45088 and add patch for CVE-2022-29536</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; 1:40.6-2" date="1662724800">- fix issue #I5QHPI</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; 1:40.6-3" date="1677153600">- fix CVE-2023-26081</changelog>
</package>
<package pkgid="52c848d2533ef4d188d15a068d6705a1b8e7d5edb2d7b1895a39122496e3bf68" name="epiphany-debuginfo" arch="x86_64">
  <version epoch="1" ver="40.6" rel="3.oe2203sp1"/>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.5-1" date="1624536000">- Update to 3.38.5</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 3.38.5-2" date="1631275200">- Delete rpath setting</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 40.6-1" date="1651838400">- Update to 40.6 for fix CVE-2021-45085-to-CVE-2021-45088 and add patch for CVE-2022-29536</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; 1:40.6-2" date="1662724800">- fix issue #I5QHPI</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; 1:40.6-3" date="1677153600">- fix CVE-2023-26081</changelog>
</package>
<package pkgid="a480408a107b7b685b44872e046ab6e202b7ea27542b16475d556b20c56442ed" name="epiphany-debugsource" arch="x86_64">
  <version epoch="1" ver="40.6" rel="3.oe2203sp1"/>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.5-1" date="1624536000">- Update to 3.38.5</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 3.38.5-2" date="1631275200">- Delete rpath setting</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 40.6-1" date="1651838400">- Update to 40.6 for fix CVE-2021-45085-to-CVE-2021-45088 and add patch for CVE-2022-29536</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; 1:40.6-2" date="1662724800">- fix issue #I5QHPI</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; 1:40.6-3" date="1677153600">- fix CVE-2023-26081</changelog>
</package>
<package pkgid="007abf63a7823cbba681bc8cddf91e80ecf11dc965ac3384c6a2699f811ab023" name="epiphany-runtime" arch="x86_64">
  <version epoch="1" ver="40.6" rel="3.oe2203sp1"/>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.5-1" date="1624536000">- Update to 3.38.5</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 3.38.5-2" date="1631275200">- Delete rpath setting</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 40.6-1" date="1651838400">- Update to 40.6 for fix CVE-2021-45085-to-CVE-2021-45088 and add patch for CVE-2022-29536</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; 1:40.6-2" date="1662724800">- fix issue #I5QHPI</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; 1:40.6-3" date="1677153600">- fix CVE-2023-26081</changelog>
</package>
<package pkgid="84bf0652112a2057dee189817e80388fe5d34b68768acdc9ebf8b53f3039c3e5" name="erlang" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="bdf47c5501fd97bac774c038cbf830b1a09dc1653f8980ea95772be7de3de96f" name="erlang" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="8777cfd26349661e7d160cd66d912bdcf42fad715241957338e0de6636344ae3" name="erlang-asn1" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="76e9d1de90823357e894cce036f8a03cbbdcfad700f2601b6645ed06c02d7f2a" name="erlang-asn1" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="a1807e8a237b8c376cc6ec4061a3cc9f77478e10ab491dd8f18ecd9acaec2109" name="erlang-common_test" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="5541fb24dd866a59cc0a0a37385c2a34fae086ca9eb50356072a752fba3701a2" name="erlang-common_test" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="15d6f399236a423dd015504dabd1ce4adfd0a5a89ef8c04a959d31ad51353e18" name="erlang-compiler" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="6d59f203482fc4993a9551f20b713250006d5e4dc8c7ae06064871d7201fdf9a" name="erlang-compiler" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="6960dce660aa196616984932d4127b66abd473505b56bab34a5eafd89dc39fa0" name="erlang-crypto" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="6058adc43b29fed7dfddc6fd3160aec724c890c490b6adf5231577dced085cae" name="erlang-crypto" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="c1b3611cb6b217e290df48d875591c3d6b6291f68d411aaeda54314ec4e270d7" name="erlang-debugger" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="ed51f7d4fe2230441b36b1442e001f68ac837c83ed62d9263e30ed56a5986317" name="erlang-debugger" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="7b6322a8343ced99a309bfb6f177ad3678aa6dec9e0b7e9e0266ded9ef347bd8" name="erlang-debuginfo" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="b793c236b37f18d0a9b9f4aa74d2ac6c253202ab19b833d9a2ecc65f0be87546" name="erlang-debuginfo" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="31bae3b4193abb2a9ce6d5d2aa94f8ecd5158017f54f4742657bb644fe602427" name="erlang-debugsource" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="9535aef2517b6fa5679006cb48fa77f95ffedc6e2486b2136b8b6356747f0ede" name="erlang-debugsource" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="fe0c9ef4f0d03b331479c89411c3520c6a97f6d85e2ee9574300698cc34bab32" name="erlang-dialyzer" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="f5c396008807c944a25544267e5fbbba9e79946844ac03c2380ae1a56923a0a0" name="erlang-dialyzer" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="3693b8a7681e513891ca2a78a85b4d8f4bc3a42c8a8e9ac32a6658e2bcef0d5c" name="erlang-diameter" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="f741180816a6ff5753e6ecd9526986e2cedf49df1345a37ae2e8be3f57e04b96" name="erlang-diameter" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="3698367f5422351f737d407cbda9fec607ac84514d843e3871402bf467322f6c" name="erlang-edoc" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="3af9e0cbb3c1549e406986c9324e82790e254ff6deb8103136e5aaadc5433db1" name="erlang-edoc" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="8089e0b07c7f907d30c5b9776e9fb2bce43274501f2a0b1e458841534ed7bcfd" name="erlang-eldap" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="e3182d944cae02c4a317e60427eef2fe43c12525cd36e19092befe13901dcb92" name="erlang-eldap" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="8d39dc2ba34d15af88c470e001d2268c746b8f05e4687cfca13d7f5be31203ec" name="erlang-erl_docgen" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="7d8049a05ff96278946f52a09ea3e005ed7b650a33d485361bac55260f8042a2" name="erlang-erl_docgen" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="30d748b79ba72d2bbde2face3e35297ca550fc94934f6da6d71e2d797a561772" name="erlang-erl_interface" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="d0fa75f2987cce9e5fd015e278fdeae16a1df92caddf6f5fc1dc1955db4e4ec6" name="erlang-erl_interface" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="a7bc79288d37f7ce6a23b593dfbde064af004350738fceeff50451acc7ae483b" name="erlang-erts" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="1182761b2310cd3f8386e3eca7bea3d177167b6904c71fa493977bc2beec5ff7" name="erlang-erts" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="d4949d5b2ca5e4ab5a72295d7f34fcb583014c5ef49e9ef8ba4a6383c6c01dd3" name="erlang-et" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="f7b410fc894b8cdb15c4034935a27d6bda7f3d602bd7d8b353582c7a104e38e5" name="erlang-et" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="9c1cd6befb14ee58290bdef3c53560a0c6e59819cccd8eece440c145eec8c5a7" name="erlang-eunit" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="a896dec3d435c94f20f278d1b929a33e0ebbc39b1a4160b1f0f41e13d5439a3d" name="erlang-eunit" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="3a55e5a0370ddd9af24431761d3faa0d16044009851ca997cf32ff2c9fddc9cf" name="erlang-examples" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="b2263cdf2c4b6cab338e1374967c179c7511286f0a003a1d2edf660a3e0abc98" name="erlang-examples" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="c3d7da2fa1a531b12b7820e7a04d79969cd6c78e591384c4fb5b3e283699f189" name="erlang-ftp" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="b9e199147cd3dd452acf4ca987dea52a869204949a8ce6ccba3e9e4bf1c3ff78" name="erlang-ftp" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="2909d1be2b75c1c093e948ea396d8c9a39e1bdc1cbfe92cd39e8a7407b31030c" name="erlang-hipe" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="663a34cc231ff110817f96fe59a618030a0e13e6aab54ce962356aaaba48cda1" name="erlang-hipe" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="d97db40372e65bc8ec2376fcb7e528307ccf60527df7d274a1aab59e64230c3b" name="erlang-inets" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="d20258da05e735efac86e82489c793f71be48af2a7919da4e645187995614859" name="erlang-inets" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="07c899f63e3dbe6ca90940ff297710e132aab12ac360f3c51e5f44a4ae970538" name="erlang-jinterface" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="4a5824b23b1f5b5d7079ec625e57fe52b57d1219427a5c39ea0e600391f9d8b4" name="erlang-jinterface" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="a029a0b2d29bac17a97384a77ee6d9d6f4655ebfd39c12eddd0ee56b6e827f62" name="erlang-kernel" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="441288bc1727fd52e427de44ff4a40eca0f6e1369d3a36fc5f181df1430df729" name="erlang-kernel" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="67c2af3e993001f1f2758b4dcc90a5607aefd0925b925a934afaea672b5d46cf" name="erlang-megaco" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="2472b4227ab9a106debef669c29bf4aaaaf96c26cec25f96d86fce71cb0626d5" name="erlang-megaco" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="79a1663b0000857b6f1911fe5b2aed9c6559a02fd9b8198d97a08169140f3ae5" name="erlang-mnesia" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="5b088699b093e3a9bdce6760e71f40a564b0a1be80ea22f763c050eec0fef54f" name="erlang-mnesia" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="be4b6df60b680a499f6490945061ffd91a3f7c3c8064eee85b0d0188552834f9" name="erlang-observer" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="7211dbf0857d9bbbf6489ecc9f1ce09ff8cd00208cb200f316fae0c2ba254e43" name="erlang-observer" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="ea97667fa977259737256c391e1013aaf6e3620490b1324451cb446306f6a7e4" name="erlang-odbc" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="dd507095b9c96a6c8317459a00dfd982fc8a0744e10f7086cc78c398c92173f0" name="erlang-odbc" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="724d0b83d48b2860d56ffbfd6df8fd43fb9918be5b10737acaad34688e02f74b" name="erlang-os_mon" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="7551cc65e822f11b22967df86636ab859d2076fc24b6ad3d4dbe1abb996fc3cb" name="erlang-os_mon" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="14af3a1188522d937ca8c7fa92cf87ef281bf1860d2cf10e125e7e839d821477" name="erlang-parsetools" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="47cdf11d7a5a99fd7871c67cef6499413d1f10b1b600b840876552815f76a7f6" name="erlang-parsetools" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="74ade51ebdb30f7e1339d37fed07711e188e36ad73ce84f9ede5879674486240" name="erlang-public_key" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="e5f965e2379cc748361a8f5b58bc3bd952c5b75209ed6e53506da905d138ddf4" name="erlang-public_key" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="95188d848fb6b720f6c056a435ae19ebdf3bec4ba084bf3ef90d5f09ff4dc211" name="erlang-reltool" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="69e64eff9dc745fd6f598774c9e822c00c74605834c994a122cdf5b46e90e981" name="erlang-reltool" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="a4849a94f11ddc2935ef95fe31b809f8837b16d50f65e9caaf983d722caf14b1" name="erlang-runtime_tools" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="4e9b57735133a0acecb860be088a2a59fd34b4c1b4fe67edf6965aee70d38eb4" name="erlang-runtime_tools" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="a64bb90fdb8a74854dd8351d89d5c2584d125403f7bdd7ad4184086d0ceaf376" name="erlang-sasl" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="97d742ee81b01e39ab8a5baf536fb9dcc65376d763ebbd1f5144be342a891a88" name="erlang-sasl" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="17b4093bcd786b5b9b4d0765dce8391bab133412e4a2c52986591ffa513b0267" name="erlang-snmp" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="fd33062ca221ca77f182b8c396013ac36db1b5ea214ac7703d0f4cfde457834a" name="erlang-snmp" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="1cacf4f377cea7b931173606922132f7f8b0d0a75473c6406a1320c5f4e9e717" name="erlang-ssh" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="2b8ebe887d74b92ef992605f151d9618805cc8cbc3855e0282c4699abc55b0b5" name="erlang-ssh" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="2cdf90d265e70966412ef3f1c0eb80b0763bc6238049b0578304c02b23722cc4" name="erlang-ssl" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="394c7f3e3cd31a8c25385bc6d8d6ba9b1a900c8706e54840266ae4f025056ef0" name="erlang-ssl" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="2df49e5432d9b7c2176091ee809d4a3b0f1eae6197ed27f6f5b5d9d5b3e1b33e" name="erlang-stdlib" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="49c5599a0ac616a13061303bffd1aa7c258745fc83649dfb77fa0a31565660f5" name="erlang-stdlib" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="ef94dd3910efcbe2cac6a756270d8915880e739401f3d380f5e5d4af6aa84738" name="erlang-syntax_tools" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="e487d31ee0c944be51e0b93622883421d7ea58873b2417026e8b2e35fbd0da2c" name="erlang-syntax_tools" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="4642629d75082c928193c3ded06f2d12b075a6fcd77801dc89e95bdc69dda0d1" name="erlang-tftp" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="8cc3c3fac3c848360d0908ab8d2cc3ad7883a345613e161570d7fa32e5543e1a" name="erlang-tftp" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="7ec38c3ff341dcd1c02c67ade9a3f01ad7a307a3cbc7191fd4cbc7627895833b" name="erlang-tools" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="71d39604186f557839927ec31e5e092b6b9dd18346b1e6d78d0700e63ab3a4aa" name="erlang-tools" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="f6a754b8d3f79cbec92068e3be840aeadbc50a92bb945a67ab62f993ed832c50" name="erlang-wx" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="129bbd52195d6649101268051eb6780da7520f2db51f3a42bcd9a1ffcdab05f6" name="erlang-wx" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="0d3acbe83cc7c97a03be394662cbf06f0868baad3a2aea8a8f780feb47753c37" name="erlang-xmerl" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="2bd806c84f74eda1323e7002a25e43c916ce7a11e3dea2879e84060d490f8a9d" name="erlang-xmerl" arch="x86_64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="7825d2a45cc21e5ece89ceb46b9ab3966fc24507ec6f8922bf3aed1fef5b2f11" name="espeak-ng" arch="x86_64">
  <version epoch="0" ver="1.51" rel="2.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.51-1" date="1697716800">- Update to version 1.51</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.51-2" date="1703764800">- Fix CVE-2023-49990~CVE-2023-49994</changelog>
</package>
<package pkgid="d143d9330cc825a25ea82232e80fcddc1f08cf43d1da82d692372ecc8d310b91" name="espeak-ng-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.51" rel="2.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.51-1" date="1697716800">- Update to version 1.51</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.51-2" date="1703764800">- Fix CVE-2023-49990~CVE-2023-49994</changelog>
</package>
<package pkgid="66f5d6a704a27813216250f992c5b1a7a46506117019e5c79cc5e386d749a7e6" name="espeak-ng-debugsource" arch="x86_64">
  <version epoch="0" ver="1.51" rel="2.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.51-1" date="1697716800">- Update to version 1.51</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.51-2" date="1703764800">- Fix CVE-2023-49990~CVE-2023-49994</changelog>
</package>
<package pkgid="280a46ffb00ef951f14ebc60029303597d945b11cb3289c83386c57a4ccbf122" name="espeak-ng-devel" arch="x86_64">
  <version epoch="0" ver="1.51" rel="2.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.51-1" date="1697716800">- Update to version 1.51</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.51-2" date="1703764800">- Fix CVE-2023-49990~CVE-2023-49994</changelog>
</package>
<package pkgid="1d9a17e3fb7a0e3d4ca9560526deb3168fa003bc5cd85bc3ef3f6c71a4b03e37" name="espeak-ng-help" arch="noarch">
  <version epoch="0" ver="1.51" rel="2.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.51-1" date="1697716800">- Update to version 1.51</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.51-2" date="1703764800">- Fix CVE-2023-49990~CVE-2023-49994</changelog>
</package>
<package pkgid="f5169795a833b9ba2fcad8a784019d46f45fd73bbc0fcbdaa5f86869a752d59d" name="expat" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="10.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
</package>
<package pkgid="a9e01551d1d4aec4b63fe82b7a5aa1328a5137f92b61d50ed5a3bfb4f0b8a85a" name="expat-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="10.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
</package>
<package pkgid="e8f740e614c988686d577156cf91c121f9bfeae52bad5f24733e5c50a6656cb3" name="expat-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="10.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
</package>
<package pkgid="9e345283a97a94feaa3e77ec086a591391b106d3e245394400bff6590265a177" name="expat-devel" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="10.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
</package>
<package pkgid="e320ae481a129f222747c1de297faffed974bce9f1c13dc0df395d384a06c1c4" name="expat-help" arch="noarch">
  <version epoch="0" ver="2.4.1" rel="10.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
</package>
<package pkgid="9daec835b70f33c7f14665f342c77ef44b2efd976c798f73d34b7720589e442a" name="expect" arch="x86_64">
  <version epoch="1" ver="5.45.4" rel="8.oe2203sp1"/>
  <changelog author="yangzhao1 &lt;yangzhao1@kylinos.cn&gt; - 1:5.45.4-7" date="1654776000">- Remove unnecessary Buildrequires git</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:5.45.4-8" date="1708603200">- remove rpath and runpath of exec files and libraries</changelog>
</package>
<package pkgid="d3865895ee7e02553b0e1e89eea899a65a529b5542fe69b147022b3576369843" name="expect-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.45.4" rel="8.oe2203sp1"/>
  <changelog author="yangzhao1 &lt;yangzhao1@kylinos.cn&gt; - 1:5.45.4-7" date="1654776000">- Remove unnecessary Buildrequires git</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:5.45.4-8" date="1708603200">- remove rpath and runpath of exec files and libraries</changelog>
</package>
<package pkgid="f3d18bb91e52764ecea440c302ccec31e579ed2e2ddd5e954519414e20ebe625" name="expect-debugsource" arch="x86_64">
  <version epoch="1" ver="5.45.4" rel="8.oe2203sp1"/>
  <changelog author="yangzhao1 &lt;yangzhao1@kylinos.cn&gt; - 1:5.45.4-7" date="1654776000">- Remove unnecessary Buildrequires git</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:5.45.4-8" date="1708603200">- remove rpath and runpath of exec files and libraries</changelog>
</package>
<package pkgid="63db9382871afdc4868d37905fec06b6cd0cd2144bcdba5134e62e150bddef7d" name="expect-devel" arch="x86_64">
  <version epoch="1" ver="5.45.4" rel="8.oe2203sp1"/>
  <changelog author="yangzhao1 &lt;yangzhao1@kylinos.cn&gt; - 1:5.45.4-7" date="1654776000">- Remove unnecessary Buildrequires git</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:5.45.4-8" date="1708603200">- remove rpath and runpath of exec files and libraries</changelog>
</package>
<package pkgid="f692bed3e1234b4a646a67f45d7d0eb78e58ea6be235c859f0a8160fc059d1e5" name="expect-help" arch="noarch">
  <version epoch="1" ver="5.45.4" rel="8.oe2203sp1"/>
  <changelog author="yangzhao1 &lt;yangzhao1@kylinos.cn&gt; - 1:5.45.4-7" date="1654776000">- Remove unnecessary Buildrequires git</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:5.45.4-8" date="1708603200">- remove rpath and runpath of exec files and libraries</changelog>
</package>
<package pkgid="34955f63c841ed77716a1c273680d72e5e5ebca49f23539ec939d64e3efa8267" name="fdupes" arch="x86_64">
  <version epoch="1" ver="2.3.0" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:2.3.0-1" date="1714305600">- Update to 2.3.0 for fix CVE-2022-48682
- Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
- Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
- Use configure script for installation (Autotools/Automake).
- Rename cs command ("clear all selections") from cs to csel.
- Rename igs command ("invert selections") from igs to isel.
- Add "prune" command as synonym for DELETE key.
- Clear selections after deleting files via prune/DELETE.
- Fix dependency issues when fdupes is configured to not use ncurses.
- Do not enter ncurses mode when --immediate option given.</changelog>
</package>
<package pkgid="afc293ca396161a95d1dfa13a977199a478367d02998aefe90d0d40752a81b22" name="fdupes-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.0" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:2.3.0-1" date="1714305600">- Update to 2.3.0 for fix CVE-2022-48682
- Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
- Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
- Use configure script for installation (Autotools/Automake).
- Rename cs command ("clear all selections") from cs to csel.
- Rename igs command ("invert selections") from igs to isel.
- Add "prune" command as synonym for DELETE key.
- Clear selections after deleting files via prune/DELETE.
- Fix dependency issues when fdupes is configured to not use ncurses.
- Do not enter ncurses mode when --immediate option given.</changelog>
</package>
<package pkgid="4e3eeb684a31da8d708143bfbf7b60f09883d206fd7e43b1f3dbd28d6cd91583" name="fdupes-debugsource" arch="x86_64">
  <version epoch="1" ver="2.3.0" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:2.3.0-1" date="1714305600">- Update to 2.3.0 for fix CVE-2022-48682
- Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
- Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
- Use configure script for installation (Autotools/Automake).
- Rename cs command ("clear all selections") from cs to csel.
- Rename igs command ("invert selections") from igs to isel.
- Add "prune" command as synonym for DELETE key.
- Clear selections after deleting files via prune/DELETE.
- Fix dependency issues when fdupes is configured to not use ncurses.
- Do not enter ncurses mode when --immediate option given.</changelog>
</package>
<package pkgid="77cfe353be3861c36b9753e30a6dc1b405552790e4acae2ab7de39cf1bc39b0d" name="fdupes-help" arch="noarch">
  <version epoch="1" ver="2.3.0" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:2.3.0-1" date="1714305600">- Update to 2.3.0 for fix CVE-2022-48682
- Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
- Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
- Use configure script for installation (Autotools/Automake).
- Rename cs command ("clear all selections") from cs to csel.
- Rename igs command ("invert selections") from igs to isel.
- Add "prune" command as synonym for DELETE key.
- Clear selections after deleting files via prune/DELETE.
- Fix dependency issues when fdupes is configured to not use ncurses.
- Do not enter ncurses mode when --immediate option given.</changelog>
</package>
<package pkgid="daa641f8e4022b9905d68c6c71c629f5b68a03d60926b9a19c71867493e0b402" name="file" arch="x86_64">
  <version epoch="0" ver="5.41" rel="3.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@huawei.com&gt; - 5.41-1" date="1637928000">- update to 5.41</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 5.41-2" date="1666180800">- fix typos fxlb</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.41-3" date="1692792000">- fix CVE-2022-48554</changelog>
</package>
<package pkgid="b6a0e63469104207cb80bfd56517b95c68ecf2d19caf0008fc21c6b2663bca95" name="file-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.41" rel="3.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@huawei.com&gt; - 5.41-1" date="1637928000">- update to 5.41</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 5.41-2" date="1666180800">- fix typos fxlb</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.41-3" date="1692792000">- fix CVE-2022-48554</changelog>
</package>
<package pkgid="fde3612d1081ccf48dfa0be967d1e33e0303b41d7f4a3d9f3ef291e7d8e06916" name="file-debugsource" arch="x86_64">
  <version epoch="0" ver="5.41" rel="3.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@huawei.com&gt; - 5.41-1" date="1637928000">- update to 5.41</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 5.41-2" date="1666180800">- fix typos fxlb</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.41-3" date="1692792000">- fix CVE-2022-48554</changelog>
</package>
<package pkgid="3bd101c34a9689bec65ce584b3b0edb88c87cc24434e9f1fc2b7f15a8068499b" name="file-devel" arch="x86_64">
  <version epoch="0" ver="5.41" rel="3.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@huawei.com&gt; - 5.41-1" date="1637928000">- update to 5.41</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 5.41-2" date="1666180800">- fix typos fxlb</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.41-3" date="1692792000">- fix CVE-2022-48554</changelog>
</package>
<package pkgid="de6a2d5c53fddab06fc9e58babc4086fa27b21135da4d7660116f89ccb5d4896" name="file-help" arch="x86_64">
  <version epoch="0" ver="5.41" rel="3.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@huawei.com&gt; - 5.41-1" date="1637928000">- update to 5.41</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 5.41-2" date="1666180800">- fix typos fxlb</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.41-3" date="1692792000">- fix CVE-2022-48554</changelog>
</package>
<package pkgid="f52c52edbad75e592bcf5543ee7d847dc045c7ade7213720364d5a085c55b491" name="file-libs" arch="x86_64">
  <version epoch="0" ver="5.41" rel="3.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@huawei.com&gt; - 5.41-1" date="1637928000">- update to 5.41</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 5.41-2" date="1666180800">- fix typos fxlb</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.41-3" date="1692792000">- fix CVE-2022-48554</changelog>
</package>
<package pkgid="027507a5b6c11ea75523a8d5222e83f6336b465d6a9dd2711d0acb77ee6d44b8" name="firefox" arch="x86_64">
  <version epoch="0" ver="102.11.0" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 79.0-7" date="1625486400">- Fix build with pipewire 0.3</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-8" date="1625659200">- Fix firefox video tab crash with rust 1.51</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 79.0-9" date="1628683200">- Fix glibc dynstack</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-10" date="1629720000">- Fix firefox tab crash with clone3 in glibc 2.34</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 79.0-11" date="1641902400">- Fix firefox wl_proxy_marshal_flags undefine.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
</package>
<package pkgid="b00b3b1b7a1c57abb3396e0cc8e782427f84ac62a3c12e250a58c239b301219d" name="firefox" arch="x86_64">
  <version epoch="0" ver="102.14.0" rel="1.oe2203sp1"/>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-10" date="1629720000">- Fix firefox tab crash with clone3 in glibc 2.34</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 79.0-11" date="1641902400">- Fix firefox wl_proxy_marshal_flags undefine.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
</package>
<package pkgid="3c2178d154afe1d963c21d48845bb393e0716635071af7fba4c04b8f420adc75" name="firefox" arch="x86_64">
  <version epoch="0" ver="102.15.0" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
</package>
<package pkgid="d41e56fc3809b04a88937c4f226b87da068a92ead5e266cfedf32623b2026cac" name="firefox" arch="x86_64">
  <version epoch="0" ver="102.15.0" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
</package>
<package pkgid="38f5b18b92bd08e8ab5def5ecd0017d1c412927059d001c8e70a40d4de05c790" name="firefox" arch="x86_64">
  <version epoch="0" ver="102.15.0" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
</package>
<package pkgid="c374c6948805c5b069fade82c0d57e166a68a9388d67b368c0ba34f546839a0b" name="firefox" arch="x86_64">
  <version epoch="0" ver="102.15.0" rel="5.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
</package>
<package pkgid="020901d300beb68884a20c33f3cdaae189c3a2a7cbcffe9c0b6c9e0c32003ea5" name="firefox" arch="x86_64">
  <version epoch="0" ver="102.15.0" rel="6.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
</package>
<package pkgid="07d47e4de9b2c26e1bcaa74893da3e18b5ce8902665181c67a017f57b6ffaba5" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="102.11.0" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 79.0-7" date="1625486400">- Fix build with pipewire 0.3</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-8" date="1625659200">- Fix firefox video tab crash with rust 1.51</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 79.0-9" date="1628683200">- Fix glibc dynstack</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-10" date="1629720000">- Fix firefox tab crash with clone3 in glibc 2.34</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 79.0-11" date="1641902400">- Fix firefox wl_proxy_marshal_flags undefine.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
</package>
<package pkgid="d51e188e5301b53a00d07df0f825be263d9598e9d4f7238997097258e1de5420" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="102.14.0" rel="1.oe2203sp1"/>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-10" date="1629720000">- Fix firefox tab crash with clone3 in glibc 2.34</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 79.0-11" date="1641902400">- Fix firefox wl_proxy_marshal_flags undefine.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
</package>
<package pkgid="8fe7c8779564c2ad122661c859327dbdb5bc2dfde42fd9954ec88c3f262c85ca" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="102.15.0" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
</package>
<package pkgid="6c8e0ddee64d450aeb431f4431cfc4a8b97eb28a2b7416de1912f715479d170a" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="102.15.0" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
</package>
<package pkgid="2650a7df6a89ce5088b4802533ddc66051a0bceae38f21950f70da3424e6d343" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="102.15.0" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
</package>
<package pkgid="853a8e02889502cae75eb2b435be8f330d30dc2c074b254729ab5a354d3ff9a2" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="102.15.0" rel="5.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
</package>
<package pkgid="60f0a44d174881095f35930a24150e4ce6fa47563225faa83a9cec91b734ef81" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="102.15.0" rel="6.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
</package>
<package pkgid="1283cab0c07fdaf1523634b6770f636017745e3804cc8d0549bff963b6c0e344" name="firefox-debugsource" arch="x86_64">
  <version epoch="0" ver="102.11.0" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 79.0-7" date="1625486400">- Fix build with pipewire 0.3</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-8" date="1625659200">- Fix firefox video tab crash with rust 1.51</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 79.0-9" date="1628683200">- Fix glibc dynstack</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-10" date="1629720000">- Fix firefox tab crash with clone3 in glibc 2.34</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 79.0-11" date="1641902400">- Fix firefox wl_proxy_marshal_flags undefine.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
</package>
<package pkgid="c61dbb690bbb33e14efc2b22634855e668a40036e07d16f9ec3902a9ca19b2a1" name="firefox-debugsource" arch="x86_64">
  <version epoch="0" ver="102.14.0" rel="1.oe2203sp1"/>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-10" date="1629720000">- Fix firefox tab crash with clone3 in glibc 2.34</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 79.0-11" date="1641902400">- Fix firefox wl_proxy_marshal_flags undefine.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
</package>
<package pkgid="8024bcf4efeed8ab12cd682e1ef2e444a7adcb749df3d35bb0cf2de78f775e87" name="firefox-debugsource" arch="x86_64">
  <version epoch="0" ver="102.15.0" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
</package>
<package pkgid="50d69d4a4b19f860cf945d2c617fbe1f5826ae86f2c5115803b51736cd4bbfa3" name="firefox-debugsource" arch="x86_64">
  <version epoch="0" ver="102.15.0" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
</package>
<package pkgid="48bfac894e1ab21716c8852ea849ef55207f21b74156b3eca68372d6e6fee887" name="firefox-debugsource" arch="x86_64">
  <version epoch="0" ver="102.15.0" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
</package>
<package pkgid="5f6bc3525fc315032c37eee2abff47633d1265f8b84876383ca419adee34932e" name="firefox-debugsource" arch="x86_64">
  <version epoch="0" ver="102.15.0" rel="5.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
</package>
<package pkgid="83873022bbe6b751af0eb992b4adb29196993f1ba3d1a38c84afcd9214a04efc" name="firefox-debugsource" arch="x86_64">
  <version epoch="0" ver="102.15.0" rel="6.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
</package>
<package pkgid="347a39f83c90f0dd72fa008fcdd12324bb2683c11cafb924f778e7199d643ca1" name="flac" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1.3.3-2" date="1648728000">- fix CVE-2021-0561</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-3" date="1650801600">- enable makecheck</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-4" date="1651060800">- disable check to avoid build error</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-5" date="1651060801">- rebuild package</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-6" date="1653739200">- fix CVE-2020-0499</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.3.3-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-1" date="1667995200">- update to 1.3.4</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-2" date="1693310400">- fix CVE-2020-22219</changelog>
</package>
<package pkgid="d99491dbddbe92d6fd4a463dc44e15a52ec763b17cddf6c69e6f196c765c0297" name="flac-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1.3.3-2" date="1648728000">- fix CVE-2021-0561</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-3" date="1650801600">- enable makecheck</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-4" date="1651060800">- disable check to avoid build error</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-5" date="1651060801">- rebuild package</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-6" date="1653739200">- fix CVE-2020-0499</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.3.3-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-1" date="1667995200">- update to 1.3.4</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-2" date="1693310400">- fix CVE-2020-22219</changelog>
</package>
<package pkgid="6301289e0c026062976224921f022dd23fb1fe5725ab3a0035b7468a70acd85f" name="flac-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1.3.3-2" date="1648728000">- fix CVE-2021-0561</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-3" date="1650801600">- enable makecheck</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-4" date="1651060800">- disable check to avoid build error</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-5" date="1651060801">- rebuild package</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-6" date="1653739200">- fix CVE-2020-0499</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.3.3-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-1" date="1667995200">- update to 1.3.4</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-2" date="1693310400">- fix CVE-2020-22219</changelog>
</package>
<package pkgid="fa24c4049eb72b6aaa9815d0dd38611fa18ada430776af70db1b391bfb7407cd" name="flac-devel" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1.3.3-2" date="1648728000">- fix CVE-2021-0561</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-3" date="1650801600">- enable makecheck</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-4" date="1651060800">- disable check to avoid build error</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-5" date="1651060801">- rebuild package</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-6" date="1653739200">- fix CVE-2020-0499</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.3.3-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-1" date="1667995200">- update to 1.3.4</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-2" date="1693310400">- fix CVE-2020-22219</changelog>
</package>
<package pkgid="3d9534b46c04faca443451f1b65a2979fcd160122f2d25f90757b343cc0a74b1" name="flac-help" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1.3.3-2" date="1648728000">- fix CVE-2021-0561</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-3" date="1650801600">- enable makecheck</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-4" date="1651060800">- disable check to avoid build error</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-5" date="1651060801">- rebuild package</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-6" date="1653739200">- fix CVE-2020-0499</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.3.3-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-1" date="1667995200">- update to 1.3.4</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-2" date="1693310400">- fix CVE-2020-22219</changelog>
</package>
<package pkgid="15eb8a267e085dd1a8da0726398b796f9379e2b5736936651a1364acc1647035" name="flatpak" arch="x86_64">
  <version epoch="0" ver="1.10.2" rel="7.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
</package>
<package pkgid="53ef285f92440792b56af30132e66af75138a9e95506e8c1b0e23e39397138b5" name="flatpak" arch="x86_64">
  <version epoch="0" ver="1.10.2" rel="8.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
</package>
<package pkgid="394136e3ed571ecc4d8d6a3d2b1673b0d951d44fe9b7f0f2ab05c1220cc594fb" name="flatpak-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.10.2" rel="7.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
</package>
<package pkgid="80d8baa45f471c8886165141c58ac2126a2c7d40c6fa3fb46c4de6896819e250" name="flatpak-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.10.2" rel="8.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
</package>
<package pkgid="0d60f9d43242395077655f72fc78aea84a6950acc9889660b75b4afa0c43a2e9" name="flatpak-debugsource" arch="x86_64">
  <version epoch="0" ver="1.10.2" rel="7.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
</package>
<package pkgid="7708dbccf347d2ef4d329a968f8b621891ab583c9e4e79f989e3519ae67793be" name="flatpak-debugsource" arch="x86_64">
  <version epoch="0" ver="1.10.2" rel="8.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
</package>
<package pkgid="5282b720acfa48dadf5017be53a21669653e6e35c9f96e67587fe381d835a5db" name="flatpak-devel" arch="x86_64">
  <version epoch="0" ver="1.10.2" rel="7.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
</package>
<package pkgid="4bdd8a9acb3e5c81f359a177b7a9d372a470f16dbae35acda1c04636a5123f97" name="flatpak-devel" arch="x86_64">
  <version epoch="0" ver="1.10.2" rel="8.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
</package>
<package pkgid="6a8b152200e8b0995e2e6a6d2f39cf0950b2ac81dd48090abe8701a3db0163e8" name="flatpak-help" arch="noarch">
  <version epoch="0" ver="1.10.2" rel="7.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
</package>
<package pkgid="f571d6f1def2a4fd43f068276fdbfcca1b45832fe6368b7ebebe6e3a8ca61076" name="flatpak-help" arch="noarch">
  <version epoch="0" ver="1.10.2" rel="8.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
</package>
<package pkgid="20e303858a20fb824687ecadd0118ac4bb9de0f2743182fa98609bc3d4c40ff9" name="fontforge" arch="x86_64">
  <version epoch="0" ver="20200314" rel="8.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 20200314-7" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 20200314-8" date="1709035200">- Fix CVE-2024-25081 and CVE-2024-25082</changelog>
</package>
<package pkgid="1fdbd6cd68889b101465e6bd82417c7d1d259ff51396d3a1a0865194e7d3fed6" name="fontforge-debuginfo" arch="x86_64">
  <version epoch="0" ver="20200314" rel="8.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 20200314-7" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 20200314-8" date="1709035200">- Fix CVE-2024-25081 and CVE-2024-25082</changelog>
</package>
<package pkgid="c57e5a5c546319757093e038cddc455b1ebbe2901b41b6b404309042f3f4cf80" name="fontforge-debugsource" arch="x86_64">
  <version epoch="0" ver="20200314" rel="8.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 20200314-7" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 20200314-8" date="1709035200">- Fix CVE-2024-25081 and CVE-2024-25082</changelog>
</package>
<package pkgid="e09324ff958548ce8af6aad533de1f155b86d0ce0fc76c1d8838de0566f78b60" name="fontforge-devel" arch="x86_64">
  <version epoch="0" ver="20200314" rel="8.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 20200314-7" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 20200314-8" date="1709035200">- Fix CVE-2024-25081 and CVE-2024-25082</changelog>
</package>
<package pkgid="f985a0457bf3acbacef8e5690282b265a1ef4aaba3cfb803b0b6594c90874881" name="fontforge-help" arch="noarch">
  <version epoch="0" ver="20200314" rel="8.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 20200314-7" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 20200314-8" date="1709035200">- Fix CVE-2024-25081 and CVE-2024-25082</changelog>
</package>
<package pkgid="1f23ae95818cf4dc8d2f5904bf45ec461ee9eb882a2d62a8c30d48332942cf3b" name="fop" arch="noarch">
  <version epoch="0" ver="2.2" rel="7.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 2.2-6" date="1669032000">- Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2-7" date="1694174400">- Fix build failure caused by batik upgrade to 1.17</changelog>
</package>
<package pkgid="db6f20ba7b52df23feea3eb53560e88cd98798f85689ae6e5c2509c7ff40f61b" name="fpack" arch="x86_64">
  <version epoch="0" ver="3.490" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.490-1" date="1644408000">- Upgrade cfitsio to 3.490 to fix CVE-2018-3848,CVE-2018-3849</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -3.490-2" date="1661342400">- Remove rpath</changelog>
</package>
<package pkgid="11a8093f0cf980f3b4876d02145ead089225829c47902470800fa8e1f3efbc74" name="freeglut" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="12.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.0-12" date="1708257600">- Fix CVE-2024-24258 and CVE-2024-24259</changelog>
</package>
<package pkgid="612d91e009d7b7f46b93b388ec87c8ad42a8bb7775af50d75ea8fc7eb1605446" name="freeglut-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="12.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.0-12" date="1708257600">- Fix CVE-2024-24258 and CVE-2024-24259</changelog>
</package>
<package pkgid="0cf24f3a24367c0300230a134c2b4d79af94df619013140796e299169f0e44a8" name="freeglut-debugsource" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="12.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.0-12" date="1708257600">- Fix CVE-2024-24258 and CVE-2024-24259</changelog>
</package>
<package pkgid="c6193b1a38f40297647691763177f6ce4cbe570758e126d4d37b733e23e8cee4" name="freeglut-devel" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="12.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.0-12" date="1708257600">- Fix CVE-2024-24258 and CVE-2024-24259</changelog>
</package>
<package pkgid="efdf5241790325cefda1eece3349720d27a76595e37ec5d5c8dcdad9e9b121d2" name="freeglut-help" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="12.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.0-12" date="1708257600">- Fix CVE-2024-24258 and CVE-2024-24259</changelog>
</package>
<package pkgid="92f8647d8bfecf3b686ef08f3333997a38e1232ead323910632ded57fab3f4b9" name="freerdp" arch="x86_64">
  <version epoch="2" ver="2.11.1" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2:2.4.1-1" date="1635854400">- Upgrade freerdp to 2.4.1 for fix CVE-2021-41159, CVE-2021-41160</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 2:2.4.1-2" date="1636372800">- Add ldconfig config file to fix freerdp-proxy dynamic library dependency</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
</package>
<package pkgid="a477bcf8e6190c77f884df8b6e1869c3616b5c07f2008fc464af79f6f1ff9682" name="freerdp" arch="x86_64">
  <version epoch="2" ver="2.11.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
</package>
<package pkgid="8e7978471d3358ed1393afcc96f3eb1f3d4d9f592c37e702cf50e8a34158d7af" name="freerdp" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
</package>
<package pkgid="bca1ac027952d7d0c3f6ac1e5cafa7485cb0c873a52b2616348410cb2219c004" name="freerdp" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-2" date="1714996800">- Fix CVE-2024-32661</changelog>
</package>
<package pkgid="b5112aefccd05f79b1fa314799392f9b81ee9172290def684a38e1274589e662" name="freerdp-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.11.1" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2:2.4.1-1" date="1635854400">- Upgrade freerdp to 2.4.1 for fix CVE-2021-41159, CVE-2021-41160</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 2:2.4.1-2" date="1636372800">- Add ldconfig config file to fix freerdp-proxy dynamic library dependency</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
</package>
<package pkgid="7494b7400f0ccd938cae8ef97aa3eb3f4257e46f28b6bd15fd756c4ecadceed4" name="freerdp-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.11.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
</package>
<package pkgid="a4a379c47075073f457a1feb1b79cc0864dc929e3a0ba962b985ab34bfc7d1bb" name="freerdp-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
</package>
<package pkgid="42786da3a8a9e9da3f6ec8664223559512b909c4f625246c646cd9834069432f" name="freerdp-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-2" date="1714996800">- Fix CVE-2024-32661</changelog>
</package>
<package pkgid="9c30143adbd6cbf5cc09cdc47a989571abc4b5e5db1296b0675d9b21fb901d2f" name="freerdp-debugsource" arch="x86_64">
  <version epoch="2" ver="2.11.1" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2:2.4.1-1" date="1635854400">- Upgrade freerdp to 2.4.1 for fix CVE-2021-41159, CVE-2021-41160</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 2:2.4.1-2" date="1636372800">- Add ldconfig config file to fix freerdp-proxy dynamic library dependency</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
</package>
<package pkgid="02d4a57aa3e309da0ebbfea3516bac1d53c4ae018e12def63dc1660f0d7be4ec" name="freerdp-debugsource" arch="x86_64">
  <version epoch="2" ver="2.11.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
</package>
<package pkgid="48a5717223ac7b348516598d5a9a43a643775ea4d86f83f3b09e8842f89f679b" name="freerdp-debugsource" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
</package>
<package pkgid="0b6e8e7c31b96e0b34beeafadda19e81eb7a3f9c6e33bead601e2d8e1c203098" name="freerdp-debugsource" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-2" date="1714996800">- Fix CVE-2024-32661</changelog>
</package>
<package pkgid="4e0ebdbf0aa0012420ffade87054a9b5ca73c1d9acfc62b58fb3aa7d3efc7470" name="freerdp-devel" arch="x86_64">
  <version epoch="2" ver="2.11.1" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2:2.4.1-1" date="1635854400">- Upgrade freerdp to 2.4.1 for fix CVE-2021-41159, CVE-2021-41160</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 2:2.4.1-2" date="1636372800">- Add ldconfig config file to fix freerdp-proxy dynamic library dependency</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
</package>
<package pkgid="82a886dd0028fc3c5b2261b9808ebf31099d624d6489a8705ad2b113151fb871" name="freerdp-devel" arch="x86_64">
  <version epoch="2" ver="2.11.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
</package>
<package pkgid="e56406b4b3c22e09e059d9b13f326e2e2ef519c0ed0058c19ddcef20c647c4fd" name="freerdp-devel" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
</package>
<package pkgid="21fde4aad5d121d5c159092028bbb0889a61025b1492a807cac155fa81fed533" name="freerdp-devel" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-2" date="1714996800">- Fix CVE-2024-32661</changelog>
</package>
<package pkgid="49a313f8f3ff02e0727923846e1a535ee1a754bbf4bab9543d0e953527c3c2c3" name="freerdp-help" arch="x86_64">
  <version epoch="2" ver="2.11.1" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2:2.4.1-1" date="1635854400">- Upgrade freerdp to 2.4.1 for fix CVE-2021-41159, CVE-2021-41160</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 2:2.4.1-2" date="1636372800">- Add ldconfig config file to fix freerdp-proxy dynamic library dependency</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
</package>
<package pkgid="90f82c897d5d30e388a92c7a4b566760b112eb662821bc70ec9c82cfc907d283" name="freerdp-help" arch="x86_64">
  <version epoch="2" ver="2.11.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
</package>
<package pkgid="2082e3f844d67261c4af5639955875d3240b601e0a3a83f572d28c65462fe111" name="freerdp-help" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
</package>
<package pkgid="ca725c1475eb9d3d94d8da2d458be182cf55fc85a974079297b3dab578c4768b" name="freerdp-help" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-2" date="1714996800">- Fix CVE-2024-32661</changelog>
</package>
<package pkgid="20f092cc542175ef71e254fb6ecbc9fd46cbf60f3ff6a4b9959c444a1002acf1" name="freetype" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="2.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 2.11.0-1" date="1639137600">- update to 2.11.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paerners.com&gt; - 2.11.0-2" date="1652529600">- fix CVE-2022-27404,CVE-2022-27405,CVE-2022-27406</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-1" date="1669723200">- update to 2.12.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
</package>
<package pkgid="c0b8b268c9e15aaf3ebd7dd3ce893cb1c856acdbd65045b5069719d4bde92ac0" name="freetype-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="2.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 2.11.0-1" date="1639137600">- update to 2.11.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paerners.com&gt; - 2.11.0-2" date="1652529600">- fix CVE-2022-27404,CVE-2022-27405,CVE-2022-27406</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-1" date="1669723200">- update to 2.12.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
</package>
<package pkgid="f2a6395b3adf13485bbdad07b051185bd63c1aacd21ff52cd81c38c311feb4d5" name="freetype-debugsource" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="2.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 2.11.0-1" date="1639137600">- update to 2.11.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paerners.com&gt; - 2.11.0-2" date="1652529600">- fix CVE-2022-27404,CVE-2022-27405,CVE-2022-27406</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-1" date="1669723200">- update to 2.12.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
</package>
<package pkgid="5cb3060a4dc009c333fbc279cef45fb9e4653e8a5b44613cf59e4d2866b45185" name="freetype-demos" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="2.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 2.11.0-1" date="1639137600">- update to 2.11.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paerners.com&gt; - 2.11.0-2" date="1652529600">- fix CVE-2022-27404,CVE-2022-27405,CVE-2022-27406</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-1" date="1669723200">- update to 2.12.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
</package>
<package pkgid="950bdbd0b01bb41fe8be3f9d4424655b70e973fe58fdc01d572ae22edfa5e8f6" name="freetype-devel" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="2.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 2.11.0-1" date="1639137600">- update to 2.11.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paerners.com&gt; - 2.11.0-2" date="1652529600">- fix CVE-2022-27404,CVE-2022-27405,CVE-2022-27406</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-1" date="1669723200">- update to 2.12.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
</package>
<package pkgid="e0becc0638d2a40fe438ab6025006e7a52ce682e324cd40635d88891b3daee19" name="freetype-help" arch="noarch">
  <version epoch="0" ver="2.12.1" rel="2.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 2.11.0-1" date="1639137600">- update to 2.11.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paerners.com&gt; - 2.11.0-2" date="1652529600">- fix CVE-2022-27404,CVE-2022-27405,CVE-2022-27406</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-1" date="1669723200">- update to 2.12.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
</package>
<package pkgid="916ab611e0035c78fda0fd15346fd513a942676bbbb82338ea178ef7309f5384" name="galera" arch="x86_64">
  <version epoch="0" ver="26.4.16" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 26.4.16-1" date="1701777600">- Upgrade to 26.4.16 and fix build error</changelog>
</package>
<package pkgid="0ece16a6f72bb0a4eb0ad8b1ebfe05e13dbc516491e5e991e3bd2d6a4c0cc421" name="galera-debuginfo" arch="x86_64">
  <version epoch="0" ver="26.4.16" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 26.4.16-1" date="1701777600">- Upgrade to 26.4.16 and fix build error</changelog>
</package>
<package pkgid="6d0c17bb7a48e1391f778a0b117002b859753ffbddd8f30113b134dd9071a66c" name="galera-debugsource" arch="x86_64">
  <version epoch="0" ver="26.4.16" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 26.4.16-1" date="1701777600">- Upgrade to 26.4.16 and fix build error</changelog>
</package>
<package pkgid="29c2b0a64a07939ce70f551ba77831fe1d50459cc1bacb392259d1885251d9ba" name="gawk" arch="x86_64">
  <version epoch="0" ver="5.1.1" rel="5.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 5.1.1-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update gawk to  5.1.1-1</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-2" date="1648814400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix test case probabilistic fail</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-3" date="1662120000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix source code cannot be found</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 5.1.1-4" date="1682251200">- fix sw_64 build</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 5.1.1-5" date="1693224000">- fix CVE-2023-4156</changelog>
</package>
<package pkgid="b49fa356c3faeea1ea13517ab16da6c4d39560bba8cdc0c798525577a317c5d9" name="gawk-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.1.1" rel="5.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 5.1.1-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update gawk to  5.1.1-1</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-2" date="1648814400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix test case probabilistic fail</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-3" date="1662120000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix source code cannot be found</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 5.1.1-4" date="1682251200">- fix sw_64 build</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 5.1.1-5" date="1693224000">- fix CVE-2023-4156</changelog>
</package>
<package pkgid="65c353ee0bd7ebcd375f32be0de3f358a460cc1b53b4830a9204b0b9b85c636c" name="gawk-debugsource" arch="x86_64">
  <version epoch="0" ver="5.1.1" rel="5.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 5.1.1-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update gawk to  5.1.1-1</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-2" date="1648814400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix test case probabilistic fail</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-3" date="1662120000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix source code cannot be found</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 5.1.1-4" date="1682251200">- fix sw_64 build</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 5.1.1-5" date="1693224000">- fix CVE-2023-4156</changelog>
</package>
<package pkgid="6ad57fc133167cf82b023937042fd0e625760d069a704bd1ecfac8a2c4654578" name="gawk-devel" arch="x86_64">
  <version epoch="0" ver="5.1.1" rel="5.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 5.1.1-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update gawk to  5.1.1-1</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-2" date="1648814400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix test case probabilistic fail</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-3" date="1662120000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix source code cannot be found</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 5.1.1-4" date="1682251200">- fix sw_64 build</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 5.1.1-5" date="1693224000">- fix CVE-2023-4156</changelog>
</package>
<package pkgid="12751b008743d033eaf89ab0aae31e25d65930860a7ac090635de2ea79a20d62" name="gawk-help" arch="noarch">
  <version epoch="0" ver="5.1.1" rel="5.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 5.1.1-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update gawk to  5.1.1-1</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-2" date="1648814400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix test case probabilistic fail</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-3" date="1662120000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix source code cannot be found</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 5.1.1-4" date="1682251200">- fix sw_64 build</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 5.1.1-5" date="1693224000">- fix CVE-2023-4156</changelog>
</package>
<package pkgid="b5fc6dfd342383fe46e4282bb8efba6e211e125122abf4433170951c64a5a97f" name="gawk-lang" arch="x86_64">
  <version epoch="0" ver="5.1.1" rel="5.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 5.1.1-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update gawk to  5.1.1-1</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-2" date="1648814400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix test case probabilistic fail</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-3" date="1662120000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix source code cannot be found</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 5.1.1-4" date="1682251200">- fix sw_64 build</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 5.1.1-5" date="1693224000">- fix CVE-2023-4156</changelog>
</package>
<package pkgid="d5853c8a38c47a6447c1a85710577324d1e9a935f0ca0c9a5365c8194fe20b7c" name="gazelle" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="44.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.1-35" date="1671278400">- optimite net type
  app bind numa when epoll/poll create
  stack thread params set dafult value</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.1-36" date="1671278401">- remove mbuf reserve in mbuf alloc</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-37" date="1671364800">- pkts-bulk-send-to-nic and rpc-dont-send</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-38" date="1671537600">- optimite recv data buff and send pkts index</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-39" date="1671624000">- add mempool dfx info
  write support without epoll/poll</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-40" date="1671710400">- add dfx rcv_nxt info
  mbuf private cache line align
  send pkts index bug fix
  free recv pkts in main loop</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-41" date="1671796800">- fix null pointer deref in stack_broadcast_close
- fix lstack Makefile warning</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-42" date="1672228800">- pbuf cacheline align
  support main thread affinity
  reduce epoll wakeup</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-43" date="1672401600">- revert expand recv data buff</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-44" date="1673006400">- add the suggestion of using the -u parameter when the connection to unix socket fails</changelog>
</package>
<package pkgid="d717874bec61d8eb610926f1de059806bfbc422f58f982d0b484f8d0dcffa3bd" name="gazelle" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="57.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan3@huawei.com&gt; - 1.0.1-55" date="1681992000">- sepeate_string_to array add error args handle</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-56" date="1683979200">- fix build err with dpdk-21.11
- fix config flow rule race
- update lstack.Makefile
- add socket check before write it
- optimize do_close
- set kni_switch valid only in primary process
- fix build err on select_path
- optimite select_path and pbuf_take
- check primary process idx and secondary lstack num
- revert select_thread_path and optimize app thread when sendmsg
- do not transfer broadcast arp pkts to other process</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-57" date="1684238400">- add udp multicast support in gazelle
- clean code
- add bond4 suport
- dfx: security function failed, return error directly
- dfx: set g_unix_fd to -1 after abnormal close fd to avoid double close
- fix bond_ports parse error fix socket_mem parse error when the value exceeds 65536 exit if create_rxtx_pktmbuf failed build.sh build failed return 1 clean code
- add parentheses to fix build error
- fix rpc msg alloc failed fix process_numa args error coredump fix sock-&gt;conn not free when fd is kernel mode
- kni down not stop nic
- fix client connect number unbalance on lstack
- fix gazellectl -x error when multiplt user nic config</changelog>
</package>
<package pkgid="4707ee7daf151719070d27eb6ea478c63fd7e498356aa71047a02cd4aaec7bc5" name="gazelle" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="70.oe2203sp1"/>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-68" date="1687348800">- check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
- fix core dump when slave mac failed</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-69" date="1687867200">- add udp_enable to turn off udp in need</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-70" date="1688126400">- add build requires constraints on lwip version</changelog>
</package>
<package pkgid="2af88186607127de96f344284b4197e942cf8ff7283c725bbdd2030567af5826" name="gazelle" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="2.oe2203sp1"/>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-68" date="1687348800">- check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
- fix core dump when slave mac failed</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-69" date="1687867200">- add udp_enable to turn off udp in need</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-70" date="1688126400">- add build requires constraints on lwip version</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.1-71" date="1688212800">- fix bond4 EPOLLOUT event error</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.1-72" date="1688385600">- bond4 add dpdk return value check</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.2-1" date="1688472000">- update version to 1.0.2</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.2-2" date="1688817600">- sync remove unused dpdk dynamic libraries</changelog>
</package>
<package pkgid="e4a8a98e62defc117fe6abd7614a504729863ca38a9a6c2e9442e72fbdea3256" name="gazelle" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="23.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-14" date="1700308800">- enable ipv6</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-15" date="1700308801">- wrap: dont hijack select temporarily</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-16" date="1700654400">- ipv6</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-17" date="1701259200">- support vlan offload
- add vlan_id in netif
- dfx: add tcp exception and kernel event statistics
- stack: fix coredump caused by gazelleclt in rtc mode when stack num defined is greater than the hijacked thread num
- add tcp faste timer cnt
- dfx: support bond get dpdk xstats
- update src/ltran/ltran_param.c. 规范679行的报错日志信息，将“,”之后的“Please”修正为“please”
- ltran support vlan
- cfg: rm ipv6_enable
- wrap: fix connect wrong port after addr bind two ports
- add gazelle log
- PRE_LOG: modify log info while there are repeated items in conf file
- add gazelle log</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-18" date="1702123200">- Fixed an issue where no packet is sent or received when UDP traffic is sent
- support show nic offload and features
- log: optimize lstack log
- gazellectl add connect para
- dfx: fix 'gazellectl lstack show ip' failed
- The call stack is not printed in the proactive exit scenario.
- dfx: gazellectl -c support ipv6
- 1.solve the problem of 1w connection not being able to ping 2.add debug info : rpc_mempool availd size
- wrap: support shutdown
- add struct gz_addr_t
- fix coredump because of addr null in lwip_fill_sendring
- fix compilation error
- fix coredump because sock closed before send data fully
- gazellectl: fix gazellectl lstack show 1 -r error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-19" date="1702728000">- fix EPOLLIN event error
- optimize gazelle exit process 1. close all fds 2. lstack thread exits, then gazelle process exits
- mod unix time stamp to local time
- fix close can't exit
- add keep-alive info
- dfx: fix kernel_events stat</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-20" date="1702900800">- fix gazellectl lstack show ip -r with ltran error &amp;&amp; log info display unknow error
- mod time err</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-21" date="1702987200">- support netperf
- fix udp multicast bind error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-22" date="1703678400">- fix rte_ring_create/free time consuming
- use default nonblock mode
- fix func separate_str_to_array overflow problem
- CFG:fix check func strdup return value is NULL
- fix gazellectl -c msg error
- sigaction: fix deprecated signal flags
- fix alloc not free
- optimize shutdown exit process</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-23" date="1706356800">- fix dpdk_alloc_pktmbuf time-consuming
- ltran: optimize config file error message</changelog>
</package>
<package pkgid="b86e33e47ec5a4ee8ba716554ec841c6da366046442cf26aaf431f7664eca55e" name="gazelle-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="44.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.1-35" date="1671278400">- optimite net type
  app bind numa when epoll/poll create
  stack thread params set dafult value</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.1-36" date="1671278401">- remove mbuf reserve in mbuf alloc</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-37" date="1671364800">- pkts-bulk-send-to-nic and rpc-dont-send</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-38" date="1671537600">- optimite recv data buff and send pkts index</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-39" date="1671624000">- add mempool dfx info
  write support without epoll/poll</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-40" date="1671710400">- add dfx rcv_nxt info
  mbuf private cache line align
  send pkts index bug fix
  free recv pkts in main loop</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-41" date="1671796800">- fix null pointer deref in stack_broadcast_close
- fix lstack Makefile warning</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-42" date="1672228800">- pbuf cacheline align
  support main thread affinity
  reduce epoll wakeup</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-43" date="1672401600">- revert expand recv data buff</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-44" date="1673006400">- add the suggestion of using the -u parameter when the connection to unix socket fails</changelog>
</package>
<package pkgid="121792c1272527d66b653b30b5d2f520d0f770f4269a2132807029065682db52" name="gazelle-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="57.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan3@huawei.com&gt; - 1.0.1-55" date="1681992000">- sepeate_string_to array add error args handle</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-56" date="1683979200">- fix build err with dpdk-21.11
- fix config flow rule race
- update lstack.Makefile
- add socket check before write it
- optimize do_close
- set kni_switch valid only in primary process
- fix build err on select_path
- optimite select_path and pbuf_take
- check primary process idx and secondary lstack num
- revert select_thread_path and optimize app thread when sendmsg
- do not transfer broadcast arp pkts to other process</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-57" date="1684238400">- add udp multicast support in gazelle
- clean code
- add bond4 suport
- dfx: security function failed, return error directly
- dfx: set g_unix_fd to -1 after abnormal close fd to avoid double close
- fix bond_ports parse error fix socket_mem parse error when the value exceeds 65536 exit if create_rxtx_pktmbuf failed build.sh build failed return 1 clean code
- add parentheses to fix build error
- fix rpc msg alloc failed fix process_numa args error coredump fix sock-&gt;conn not free when fd is kernel mode
- kni down not stop nic
- fix client connect number unbalance on lstack
- fix gazellectl -x error when multiplt user nic config</changelog>
</package>
<package pkgid="5199ce64f413756d549b98d5c5d010f1ede852d830734a8ca9b344b2e1bec055" name="gazelle-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="70.oe2203sp1"/>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-68" date="1687348800">- check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
- fix core dump when slave mac failed</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-69" date="1687867200">- add udp_enable to turn off udp in need</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-70" date="1688126400">- add build requires constraints on lwip version</changelog>
</package>
<package pkgid="6fde576ed652c67ae470dc115c23fdc3e8335b266176ae9446f5e74e8f65836d" name="gazelle-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="2.oe2203sp1"/>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-68" date="1687348800">- check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
- fix core dump when slave mac failed</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-69" date="1687867200">- add udp_enable to turn off udp in need</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-70" date="1688126400">- add build requires constraints on lwip version</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.1-71" date="1688212800">- fix bond4 EPOLLOUT event error</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.1-72" date="1688385600">- bond4 add dpdk return value check</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.2-1" date="1688472000">- update version to 1.0.2</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.2-2" date="1688817600">- sync remove unused dpdk dynamic libraries</changelog>
</package>
<package pkgid="332160ad0172c8eceeea792e775b1f5a6a29a85bedd9c075ddcd316ea82b5cdb" name="gazelle-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="23.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-14" date="1700308800">- enable ipv6</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-15" date="1700308801">- wrap: dont hijack select temporarily</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-16" date="1700654400">- ipv6</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-17" date="1701259200">- support vlan offload
- add vlan_id in netif
- dfx: add tcp exception and kernel event statistics
- stack: fix coredump caused by gazelleclt in rtc mode when stack num defined is greater than the hijacked thread num
- add tcp faste timer cnt
- dfx: support bond get dpdk xstats
- update src/ltran/ltran_param.c. 规范679行的报错日志信息，将“,”之后的“Please”修正为“please”
- ltran support vlan
- cfg: rm ipv6_enable
- wrap: fix connect wrong port after addr bind two ports
- add gazelle log
- PRE_LOG: modify log info while there are repeated items in conf file
- add gazelle log</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-18" date="1702123200">- Fixed an issue where no packet is sent or received when UDP traffic is sent
- support show nic offload and features
- log: optimize lstack log
- gazellectl add connect para
- dfx: fix 'gazellectl lstack show ip' failed
- The call stack is not printed in the proactive exit scenario.
- dfx: gazellectl -c support ipv6
- 1.solve the problem of 1w connection not being able to ping 2.add debug info : rpc_mempool availd size
- wrap: support shutdown
- add struct gz_addr_t
- fix coredump because of addr null in lwip_fill_sendring
- fix compilation error
- fix coredump because sock closed before send data fully
- gazellectl: fix gazellectl lstack show 1 -r error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-19" date="1702728000">- fix EPOLLIN event error
- optimize gazelle exit process 1. close all fds 2. lstack thread exits, then gazelle process exits
- mod unix time stamp to local time
- fix close can't exit
- add keep-alive info
- dfx: fix kernel_events stat</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-20" date="1702900800">- fix gazellectl lstack show ip -r with ltran error &amp;&amp; log info display unknow error
- mod time err</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-21" date="1702987200">- support netperf
- fix udp multicast bind error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-22" date="1703678400">- fix rte_ring_create/free time consuming
- use default nonblock mode
- fix func separate_str_to_array overflow problem
- CFG:fix check func strdup return value is NULL
- fix gazellectl -c msg error
- sigaction: fix deprecated signal flags
- fix alloc not free
- optimize shutdown exit process</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-23" date="1706356800">- fix dpdk_alloc_pktmbuf time-consuming
- ltran: optimize config file error message</changelog>
</package>
<package pkgid="5cc93da24fc87bf2b094f0b592d623e4741c06d1b5e8ecfee6402712c83dc4c6" name="gazelle-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="44.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.1-35" date="1671278400">- optimite net type
  app bind numa when epoll/poll create
  stack thread params set dafult value</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.1-36" date="1671278401">- remove mbuf reserve in mbuf alloc</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-37" date="1671364800">- pkts-bulk-send-to-nic and rpc-dont-send</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-38" date="1671537600">- optimite recv data buff and send pkts index</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-39" date="1671624000">- add mempool dfx info
  write support without epoll/poll</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-40" date="1671710400">- add dfx rcv_nxt info
  mbuf private cache line align
  send pkts index bug fix
  free recv pkts in main loop</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-41" date="1671796800">- fix null pointer deref in stack_broadcast_close
- fix lstack Makefile warning</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-42" date="1672228800">- pbuf cacheline align
  support main thread affinity
  reduce epoll wakeup</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-43" date="1672401600">- revert expand recv data buff</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-44" date="1673006400">- add the suggestion of using the -u parameter when the connection to unix socket fails</changelog>
</package>
<package pkgid="9ffcae46dfb3c440e71bbec37e321fce2c4843aa1b6e73a7762e5801a793bdac" name="gazelle-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="57.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan3@huawei.com&gt; - 1.0.1-55" date="1681992000">- sepeate_string_to array add error args handle</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-56" date="1683979200">- fix build err with dpdk-21.11
- fix config flow rule race
- update lstack.Makefile
- add socket check before write it
- optimize do_close
- set kni_switch valid only in primary process
- fix build err on select_path
- optimite select_path and pbuf_take
- check primary process idx and secondary lstack num
- revert select_thread_path and optimize app thread when sendmsg
- do not transfer broadcast arp pkts to other process</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-57" date="1684238400">- add udp multicast support in gazelle
- clean code
- add bond4 suport
- dfx: security function failed, return error directly
- dfx: set g_unix_fd to -1 after abnormal close fd to avoid double close
- fix bond_ports parse error fix socket_mem parse error when the value exceeds 65536 exit if create_rxtx_pktmbuf failed build.sh build failed return 1 clean code
- add parentheses to fix build error
- fix rpc msg alloc failed fix process_numa args error coredump fix sock-&gt;conn not free when fd is kernel mode
- kni down not stop nic
- fix client connect number unbalance on lstack
- fix gazellectl -x error when multiplt user nic config</changelog>
</package>
<package pkgid="20d3e7436790bb31879626ca2337049624865b7353227fc3f0657303a8a5dbc0" name="gazelle-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="70.oe2203sp1"/>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-68" date="1687348800">- check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
- fix core dump when slave mac failed</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-69" date="1687867200">- add udp_enable to turn off udp in need</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-70" date="1688126400">- add build requires constraints on lwip version</changelog>
</package>
<package pkgid="6e6675c709d413560377c6aa556712fac9147286d8cee3691d55983c998446d0" name="gazelle-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="2.oe2203sp1"/>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-68" date="1687348800">- check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
- fix core dump when slave mac failed</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-69" date="1687867200">- add udp_enable to turn off udp in need</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-70" date="1688126400">- add build requires constraints on lwip version</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.1-71" date="1688212800">- fix bond4 EPOLLOUT event error</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.1-72" date="1688385600">- bond4 add dpdk return value check</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.2-1" date="1688472000">- update version to 1.0.2</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.2-2" date="1688817600">- sync remove unused dpdk dynamic libraries</changelog>
</package>
<package pkgid="7ac1fef7cc3442113f5e2876713d455139f94c6638f219c2c9aa6cd565d7e0e7" name="gazelle-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="23.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-14" date="1700308800">- enable ipv6</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-15" date="1700308801">- wrap: dont hijack select temporarily</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-16" date="1700654400">- ipv6</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-17" date="1701259200">- support vlan offload
- add vlan_id in netif
- dfx: add tcp exception and kernel event statistics
- stack: fix coredump caused by gazelleclt in rtc mode when stack num defined is greater than the hijacked thread num
- add tcp faste timer cnt
- dfx: support bond get dpdk xstats
- update src/ltran/ltran_param.c. 规范679行的报错日志信息，将“,”之后的“Please”修正为“please”
- ltran support vlan
- cfg: rm ipv6_enable
- wrap: fix connect wrong port after addr bind two ports
- add gazelle log
- PRE_LOG: modify log info while there are repeated items in conf file
- add gazelle log</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-18" date="1702123200">- Fixed an issue where no packet is sent or received when UDP traffic is sent
- support show nic offload and features
- log: optimize lstack log
- gazellectl add connect para
- dfx: fix 'gazellectl lstack show ip' failed
- The call stack is not printed in the proactive exit scenario.
- dfx: gazellectl -c support ipv6
- 1.solve the problem of 1w connection not being able to ping 2.add debug info : rpc_mempool availd size
- wrap: support shutdown
- add struct gz_addr_t
- fix coredump because of addr null in lwip_fill_sendring
- fix compilation error
- fix coredump because sock closed before send data fully
- gazellectl: fix gazellectl lstack show 1 -r error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-19" date="1702728000">- fix EPOLLIN event error
- optimize gazelle exit process 1. close all fds 2. lstack thread exits, then gazelle process exits
- mod unix time stamp to local time
- fix close can't exit
- add keep-alive info
- dfx: fix kernel_events stat</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-20" date="1702900800">- fix gazellectl lstack show ip -r with ltran error &amp;&amp; log info display unknow error
- mod time err</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-21" date="1702987200">- support netperf
- fix udp multicast bind error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-22" date="1703678400">- fix rte_ring_create/free time consuming
- use default nonblock mode
- fix func separate_str_to_array overflow problem
- CFG:fix check func strdup return value is NULL
- fix gazellectl -c msg error
- sigaction: fix deprecated signal flags
- fix alloc not free
- optimize shutdown exit process</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-23" date="1706356800">- fix dpdk_alloc_pktmbuf time-consuming
- ltran: optimize config file error message</changelog>
</package>
<package pkgid="3bd578da17b86d89f520b31fee1ae556c8700789711db229233edc143c72a9d1" name="gcc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="7c350fa62576fd6581f3737586ab59d636fb8413a2dae5584d9c7a8ba77d937e" name="gcc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="a75028764a33a61c2a5487e9c9a31b22def40c337442f667e0609b4f5aa10f8a" name="gcc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="ddef8b881f7e72718c7412a07942e32657a455ea9a117af554557ef8421bc126" name="gcc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="01ec147e0bf91a41ca4e51897bf786f50abf5d3f06754151e2ebdf8dc1724f27" name="gcc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="8853b9333ed594317874a72b65f1c811fd15fffdc69d27ed12c14940bd69a5ae" name="gcc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="03a5b7468d21acc6a7885e517fa3d569098c2ded9a6ccc293a4fb2fac0669e45" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="72111607511b4dc0a7c4c1240d5f0933ff5310ffa457128fbf539d4d0ee67be6" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="e065cf492ca90c14bae7e3aadb0066dc8d959324842435dbc636a9395f76dcb6" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="2a14dd1e6b0c47416220b84694645c91e658170c81c02452461dfcb42a54505a" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="89b395643198290f114e7f7e89d014b171168842265db5842d915576c20a049c" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="367ad7f3f9beb62f28f5daedcdf1b588a5ba9b38261645973831b314e970d356" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="55fff875ee78ec08d5831aa40f9a69508265bc223dbe308d98c61074be1f6a4e" name="gcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="7cfc39b580f10d93b3255f3b28835343f84019af525ddaaffe9fbf7c31963764" name="gcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="ccf54e4c1b4e6835edd440b57875fe5ddcffc6e7fabdb4d49ff3d9b2ef46d3db" name="gcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="5592ec07b9aa5596340a192e84dab4e37e95de4a59bf026471a8777a4b393c27" name="gcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="64fe2b1d58af7987ba58f8181c5e587e5b414678d9558d2c8c791c801934ca3f" name="gcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="3e149cbef830a4cafbc14370d9c2b0730e48f76825f691395d72e83d7ed2c07c" name="gcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="7da00e07bc786ae1fb79f4b9ea1101cf04ae66f69fb94787a35f5cc4833e9cd1" name="gcc-debugsource" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="2507d9efc3b8429ef888ef71b1ca69610fb892d6679c215e2ed73308fe8cf22b" name="gcc-debugsource" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="8316a91799f87749e4209b497ed1cc9a2816622a30a7e3a766455e3cbc487a25" name="gcc-debugsource" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="64329e359f03dc5d238d5d9c7509c3368fb022cc992e7156218ae050574a24fc" name="gcc-debugsource" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="413a18b6514ddfa366b0ece4f864ea8afa26f1a4286651d08f071ef07a15e78e" name="gcc-debugsource" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="f8416d19c521ddf6a66cdeb761befd088a642e883ec79b8fafee1db7959100e9" name="gcc-debugsource" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="547cf14000997a86977514779167d6f89552fc47c8ca0d2c14ef67a18a1ba072" name="gcc-gdb-plugin" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="ad4edf8ba17e1d9c63ef678ac97d5e3038610af219fa0d5cc3627decd6f91f3f" name="gcc-gdb-plugin" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="3839a6ed1465e5101bcdef4ee7b51aadaa1c0903a2611fa4948d6dde3dbb8c0d" name="gcc-gdb-plugin" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="95d04ad15f24d9b4044ec64a35dca451549dffe6bd7cb7bdf2aafdd4487e123a" name="gcc-gdb-plugin" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="07dc78336ae5d8e3418edb74a7a94cd220fc80d8ee737b1d6045802f9c1a8859" name="gcc-gdb-plugin" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="044e49ad0e50b476c4d26b47c69fce034cf8d014c8c9e7541121c48c8547b853" name="gcc-gdb-plugin" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="a3fc2615f07173bedf8fca7c86181d11a39069207be7613d67754308e0f2990e" name="gcc-gfortran" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="93a265e46b7d94981a74f49cd3ab344a7055e83700fe21d29492e1a5fe582c34" name="gcc-gfortran" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="fcb7f38064e46b2a754990f079725f25bb9f3ff9ced090f4eeff343fec14c22f" name="gcc-gfortran" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="31639ec64a64b4a6b42aeb876ad20360e5b25509d7b61ad566a5e65da56c0c16" name="gcc-gfortran" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="737220a9d867413dca90d3bfd764cc0c05b033b919ed5191bce3008e2de48b4e" name="gcc-gfortran" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="17d3d82f2fe71d7852d37b41500b08495fa50011724b59c433f4c1c4e30c87d3" name="gcc-gfortran" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="12c3f99567d0565f281f5ddb4dc8334c9445293e5fb028bfbb90fbabc4122d7e" name="gcc-objc++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="6e7ea408fce239f470a09363de8112d34377d3f6c28a9946dd90d7e9cbb1cb47" name="gcc-objc++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="528e01908acb0626c9260376f3635a1ab00e239d89ac824c2e35a32991f4b266" name="gcc-objc++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="0ac0857124d4e9a1c3be5ea72668d9da2303095eccd5b8c3e3d4ae71edd9580c" name="gcc-objc++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="dcf049f5f5146dfd2ee5302ded7e990ff8c650ac07d8bbd622a87c662443b462" name="gcc-objc++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="e91aa2c77d3008d89a10cb406ad5e20a53fe0189b6501e484cb2314ec1c5be22" name="gcc-objc++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="1796ecb7b7bac41952a3813037438c8d0a2a3813620b335ab1fb401b99c100ce" name="gcc-objc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="b6d6517a2507cfb239b766fc21163e7525cd20d89a5b8a707550204342fb07ee" name="gcc-objc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="94b695c391c5847d42bd99a472045f55793c5ceb8cfebf40b9be4fe854b5cb7b" name="gcc-objc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="97868485f75896300a889f98a18f06c375ce1a7e2bf11ad89a292c2b9880c930" name="gcc-objc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="63786f843b394bdfbfbba30948c1bb0d7ea19ea1271192aa971a4b7095370349" name="gcc-objc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="51d17d30f6b44bebb8eea936b9cc8e480b7be7ba6fd58318f1a927fb164b1312" name="gcc-objc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="7854306f67b81d3233ed969dbdc7e30315258942b74369470c60604bb06d6e8d" name="gcc-plugin-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="59edb1d5fee54e674d444492e79540e4a464bd370fb858f5046ad47d86488b54" name="gcc-plugin-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="6e10ad7613cbfff23bc04ebc7d17050ef22acdf26f8df14339cba1a01ddb722f" name="gcc-plugin-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="686d6a7a0154b65b206049f577ea29b8ee457f411c4356f291825b08e9dc60cd" name="gcc-plugin-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="10e46292acb521019e2fb39439db454e088b175c4c7019fe12e97841533ff707" name="gcc-plugin-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="35f72278d1689ba9dfa995f4f42fe1a00ecffdc01779ec5e496a140d53424039" name="gcc-plugin-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="3f800123a2f18d82183d91bb243b141c206ee00682d91cb93bfc1bd8d093edae" name="gdb" arch="x86_64">
  <version epoch="0" ver="11.1" rel="6.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
</package>
<package pkgid="1daf3e789bcd63973c7e1292370f342b8e4ca140fd45bcb90271bc24a013065e" name="gdb" arch="x86_64">
  <version epoch="0" ver="11.1" rel="7.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
</package>
<package pkgid="914debb24430ed509c5bc7877d94ade83886f514976507f9a5a3ea38132fcda6" name="gdb" arch="x86_64">
  <version epoch="0" ver="11.1" rel="8.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
</package>
<package pkgid="dd51182926e012245cc26a947b701a4710e9e12f72e674323429f30379b7b7a0" name="gdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.1" rel="6.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
</package>
<package pkgid="20a3ec99d2eff70785264f7e6e10b8b9d34d67220d649fcb9becef1581e42e22" name="gdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.1" rel="7.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
</package>
<package pkgid="b06494103e9ea5e68d3ea2bda2b4f6221ff30bf1d466499c9f20a37b4bc30aed" name="gdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.1" rel="8.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
</package>
<package pkgid="d4dcbec494330023639e51ce77a88f1c4ae4c8c06f757052c65d38175e4b635b" name="gdb-debugsource" arch="x86_64">
  <version epoch="0" ver="11.1" rel="6.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
</package>
<package pkgid="c95285e2067a7b2402f463228a34066fe95eb1bd004a1d9004d8180fabf38aa4" name="gdb-debugsource" arch="x86_64">
  <version epoch="0" ver="11.1" rel="7.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
</package>
<package pkgid="ee3ce038552c2be8a359b3e1b124bac68c51f1a48e5fdab3f83f874a77d43710" name="gdb-debugsource" arch="x86_64">
  <version epoch="0" ver="11.1" rel="8.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
</package>
<package pkgid="98b784a29560465c9a62faaad95bb6a955e2a8ed64746e85a2136d1bf498f989" name="gdb-gdbserver" arch="x86_64">
  <version epoch="0" ver="11.1" rel="6.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
</package>
<package pkgid="3423ebfbc18ec0258862ae2b0e38afb14b9929ff54b6e22c4ef7d86b1c7ef908" name="gdb-gdbserver" arch="x86_64">
  <version epoch="0" ver="11.1" rel="7.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
</package>
<package pkgid="321e927729691dc55810143452f767bafb84e4af80fed174a66005af81c58773" name="gdb-gdbserver" arch="x86_64">
  <version epoch="0" ver="11.1" rel="8.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
</package>
<package pkgid="e5943eb4c037ada585c13a5c0ce8cf5e51fd57d29a1a93b8a5f2629db4cf61b7" name="gdb-headless" arch="x86_64">
  <version epoch="0" ver="11.1" rel="6.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
</package>
<package pkgid="047671e5e8da60069c2c7d9dbb167a933ee384419923b3c90a69840cb8387a30" name="gdb-headless" arch="x86_64">
  <version epoch="0" ver="11.1" rel="7.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
</package>
<package pkgid="b1fb4f592aa12d0537a84c99f43caedcb9cc0cbcd854c9ba4a1ac91ed3e3006c" name="gdb-headless" arch="x86_64">
  <version epoch="0" ver="11.1" rel="8.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
</package>
<package pkgid="cba7c567b0367728ff0b366f4a7d70617754bed1a52ede175534e7be58d03837" name="gdb-help" arch="noarch">
  <version epoch="0" ver="11.1" rel="6.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
</package>
<package pkgid="b661abf3841a0a56acd67a9d868d2b5a55c8317e225bb4e427ba8a894dc1c801" name="gdb-help" arch="noarch">
  <version epoch="0" ver="11.1" rel="7.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
</package>
<package pkgid="923bf422310312b93465b6526d1d5daca900620ff7326ee1f2f35d168fa424a2" name="gdb-help" arch="noarch">
  <version epoch="0" ver="11.1" rel="8.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
</package>
<package pkgid="2c144ff6866780cd59a851dcac7722acd96e9b2b07fff18ecad3673f96b56cf3" name="gdbm" arch="x86_64">
  <version epoch="1" ver="1.22" rel="11.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1.22-2" date="1639051200">- Fix gdbmtool parm import error</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22-3" date="1646136000">- add info into the devel package to resolve the installation error</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-4" date="1655467200">- DESC: Fix binary dump format for key and or data of zero size</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-5" date="1655899200">- DESC: gdbm_dump-fix-command-line-error-detection</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-6" date="1655985600">- DESC: fix location tracking in gdbmtool, fix the recover command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-7" date="1656417600">- DESC: Fix coredump in gdbmtool history command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-8" date="1656936000">- DESC: Fix semantics of gdbm_load -r</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-9" date="1657022400">- DESC: Improve handling of -u in gdbm_load</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1:1.22-10" date="1661860800">- DESC: Fix allocated memory not released</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-11" date="1679054400">- DESC: Minor fix in the compatibility library</changelog>
</package>
<package pkgid="de035247030be6df57a3223168d389b4684491771fe16498b53533a7364fbb7c" name="gdbm-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.22" rel="11.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1.22-2" date="1639051200">- Fix gdbmtool parm import error</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22-3" date="1646136000">- add info into the devel package to resolve the installation error</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-4" date="1655467200">- DESC: Fix binary dump format for key and or data of zero size</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-5" date="1655899200">- DESC: gdbm_dump-fix-command-line-error-detection</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-6" date="1655985600">- DESC: fix location tracking in gdbmtool, fix the recover command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-7" date="1656417600">- DESC: Fix coredump in gdbmtool history command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-8" date="1656936000">- DESC: Fix semantics of gdbm_load -r</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-9" date="1657022400">- DESC: Improve handling of -u in gdbm_load</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1:1.22-10" date="1661860800">- DESC: Fix allocated memory not released</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-11" date="1679054400">- DESC: Minor fix in the compatibility library</changelog>
</package>
<package pkgid="2b011bc424967b7bd043a1ebf54279b91341113965c87ae9e5a825b6ea324a42" name="gdbm-debugsource" arch="x86_64">
  <version epoch="1" ver="1.22" rel="11.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1.22-2" date="1639051200">- Fix gdbmtool parm import error</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22-3" date="1646136000">- add info into the devel package to resolve the installation error</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-4" date="1655467200">- DESC: Fix binary dump format for key and or data of zero size</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-5" date="1655899200">- DESC: gdbm_dump-fix-command-line-error-detection</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-6" date="1655985600">- DESC: fix location tracking in gdbmtool, fix the recover command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-7" date="1656417600">- DESC: Fix coredump in gdbmtool history command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-8" date="1656936000">- DESC: Fix semantics of gdbm_load -r</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-9" date="1657022400">- DESC: Improve handling of -u in gdbm_load</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1:1.22-10" date="1661860800">- DESC: Fix allocated memory not released</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-11" date="1679054400">- DESC: Minor fix in the compatibility library</changelog>
</package>
<package pkgid="7cd481b573a8fa5de35810c7d5b8cc6db2c0a3c8da1bb80192575a863710b642" name="gdbm-devel" arch="x86_64">
  <version epoch="1" ver="1.22" rel="11.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1.22-2" date="1639051200">- Fix gdbmtool parm import error</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22-3" date="1646136000">- add info into the devel package to resolve the installation error</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-4" date="1655467200">- DESC: Fix binary dump format for key and or data of zero size</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-5" date="1655899200">- DESC: gdbm_dump-fix-command-line-error-detection</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-6" date="1655985600">- DESC: fix location tracking in gdbmtool, fix the recover command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-7" date="1656417600">- DESC: Fix coredump in gdbmtool history command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-8" date="1656936000">- DESC: Fix semantics of gdbm_load -r</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-9" date="1657022400">- DESC: Improve handling of -u in gdbm_load</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1:1.22-10" date="1661860800">- DESC: Fix allocated memory not released</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-11" date="1679054400">- DESC: Minor fix in the compatibility library</changelog>
</package>
<package pkgid="496f30ac69322a9009d5f26f25b21e960302987d0c982c12a4319caf7958adb4" name="gdbm-help" arch="noarch">
  <version epoch="1" ver="1.22" rel="11.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1.22-2" date="1639051200">- Fix gdbmtool parm import error</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22-3" date="1646136000">- add info into the devel package to resolve the installation error</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-4" date="1655467200">- DESC: Fix binary dump format for key and or data of zero size</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-5" date="1655899200">- DESC: gdbm_dump-fix-command-line-error-detection</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-6" date="1655985600">- DESC: fix location tracking in gdbmtool, fix the recover command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-7" date="1656417600">- DESC: Fix coredump in gdbmtool history command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-8" date="1656936000">- DESC: Fix semantics of gdbm_load -r</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-9" date="1657022400">- DESC: Improve handling of -u in gdbm_load</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1:1.22-10" date="1661860800">- DESC: Fix allocated memory not released</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-11" date="1679054400">- DESC: Minor fix in the compatibility library</changelog>
</package>
<package pkgid="966b580f4dec390d3b4746fb1301ddedc94711995d26c8a7c82fbe0187ee59a4" name="gdk-pixbuf2" arch="x86_64">
  <version epoch="0" ver="2.42.6" rel="6.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.40.0-2" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.42.6-1" date="1638446400">- update to 2.42.6</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@h-partners.com&gt; - 2.42.6-2" date="1648641600">- enable tests</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.42.6-3" date="1652875200">- fix spec changelog date</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
</package>
<package pkgid="43fa7f9e833a482e7582aab8d534c2b827d0245b6bf37ee806724690b41b7de9" name="gdk-pixbuf2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.42.6" rel="6.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.40.0-2" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.42.6-1" date="1638446400">- update to 2.42.6</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@h-partners.com&gt; - 2.42.6-2" date="1648641600">- enable tests</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.42.6-3" date="1652875200">- fix spec changelog date</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
</package>
<package pkgid="974b5dc3d6ddba98720fe8eac10f34e5c0545f38223f9ee7ee22a06c1bad3373" name="gdk-pixbuf2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.42.6" rel="6.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.40.0-2" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.42.6-1" date="1638446400">- update to 2.42.6</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@h-partners.com&gt; - 2.42.6-2" date="1648641600">- enable tests</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.42.6-3" date="1652875200">- fix spec changelog date</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
</package>
<package pkgid="95ee008f3e5badcda4cedbd226108d357379c8638271b1865b4b904e11f29e0c" name="gdk-pixbuf2-devel" arch="x86_64">
  <version epoch="0" ver="2.42.6" rel="6.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.40.0-2" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.42.6-1" date="1638446400">- update to 2.42.6</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@h-partners.com&gt; - 2.42.6-2" date="1648641600">- enable tests</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.42.6-3" date="1652875200">- fix spec changelog date</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
</package>
<package pkgid="0df3816c57b7aeb1577e208889687b018ca97b97ff34ae7551b042320b803eac" name="gdk-pixbuf2-help" arch="noarch">
  <version epoch="0" ver="2.42.6" rel="6.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.40.0-2" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.42.6-1" date="1638446400">- update to 2.42.6</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@h-partners.com&gt; - 2.42.6-2" date="1648641600">- enable tests</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.42.6-3" date="1652875200">- fix spec changelog date</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
</package>
<package pkgid="47a5deec4db76f3efc00295a860d901ca15cfe6d919ca2532cd870c37042c058" name="gdk-pixbuf2-modules" arch="x86_64">
  <version epoch="0" ver="2.42.6" rel="6.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.40.0-2" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.42.6-1" date="1638446400">- update to 2.42.6</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@h-partners.com&gt; - 2.42.6-2" date="1648641600">- enable tests</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.42.6-3" date="1652875200">- fix spec changelog date</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
</package>
<package pkgid="84015549e38282366fa8553558e63f8ff3f9f6fd2adcb212ab6fc0b68d259362" name="gdk-pixbuf2-tests" arch="x86_64">
  <version epoch="0" ver="2.42.6" rel="6.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.40.0-2" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.42.6-1" date="1638446400">- update to 2.42.6</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@h-partners.com&gt; - 2.42.6-2" date="1648641600">- enable tests</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.42.6-3" date="1652875200">- fix spec changelog date</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
</package>
<package pkgid="582648024de7376281103e0344d47f202e7fc20fe58d774d273c10d2cde2676b" name="genisoimage" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="51.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.1.11-46" date="1666699200">- rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.1.11-47" date="1667476800">- add sw64 patch</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-48" date="1668600000">- fix empty link</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-49" date="1669204800">- fix spell error</changelog>
  <changelog author="yueyuankun&lt;yueyuankun@kylinos.cn&gt; - 1.1.11-50" date="1698667200">- Type:update
- ID:NA
- SUG:NA
- DESC:delete Requires git</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 1.1.11-51" date="1704369600">- Type:bugfix
- ID:NA
- SUG:NA
- delete autosetup macro in changelog</changelog>
</package>
<package pkgid="3024122a9d55b3b3d9170aba91fe142e7b56a79931faa31a31d1ef7bdabe239b" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.55.0" rel="5.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 9.55.0-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 9.55.0</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
</package>
<package pkgid="f391d80cdc3d5c82735e640c647af1937a99e84dbdd4244ded9167d5c0b2b958" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.55.0" rel="6.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
</package>
<package pkgid="b0b9f68cf6c1e2bb3d964fab75778d6efa8001fcfd8ba891fd8de5705e803f89" name="ghostscript-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.55.0" rel="5.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 9.55.0-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 9.55.0</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
</package>
<package pkgid="2b9ad52735634e6a46aa7b7749dd3f2a87d777a45686b764793bc1c95fe4fddf" name="ghostscript-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.55.0" rel="6.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
</package>
<package pkgid="a373dff147539a41ac8b93d39d516f1ac8c239462b9e87d7a456c0b8f52dd66a" name="ghostscript-debugsource" arch="x86_64">
  <version epoch="0" ver="9.55.0" rel="5.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 9.55.0-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 9.55.0</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
</package>
<package pkgid="dabc6023328c4e5b104acca8f5b377d39dd07ad9b2449dd67b2c8b5f4e719292" name="ghostscript-debugsource" arch="x86_64">
  <version epoch="0" ver="9.55.0" rel="6.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
</package>
<package pkgid="94f7277a94c8be4440a46acefae6ca6b6d68e716c38b2a1021d72ebf5af0340d" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.55.0" rel="5.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 9.55.0-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 9.55.0</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
</package>
<package pkgid="7a20e79ab1a9b62e90bdfe04362b6b285b8814ffa47c6fc097d738f886b5256e" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.55.0" rel="6.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
</package>
<package pkgid="29e470d29ae186b7b82f5621c3de15bed707031078b8f295bdbbb1ecca2c745b" name="ghostscript-help" arch="noarch">
  <version epoch="0" ver="9.55.0" rel="5.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 9.55.0-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 9.55.0</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
</package>
<package pkgid="4bf4b6549297ed3aae34930c1003908b698ef29db534722b86453f709fed4240" name="ghostscript-help" arch="noarch">
  <version epoch="0" ver="9.55.0" rel="6.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
</package>
<package pkgid="d20b3d0a168fc57da725c23a5f5a2938f7327b0fd950543ad459d115612f78f5" name="ghostscript-tools-dvipdf" arch="x86_64">
  <version epoch="0" ver="9.55.0" rel="5.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 9.55.0-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 9.55.0</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
</package>
<package pkgid="13bfc40b6d19cb774229ec8d44dfbc9cc620bfc80d58d7713f9ea8f71bde3944" name="ghostscript-tools-dvipdf" arch="x86_64">
  <version epoch="0" ver="9.55.0" rel="6.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
</package>
<package pkgid="3aa083eee058cf30abc6da38e81f352dcecefc3aa357ae3ad9743aec1fd79f7f" name="giflib" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="7.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
</package>
<package pkgid="b90adb9e40d4ef2a9e7b97050bf0e3aa4ab8a44bf41fc4ce2356e17e566b7642" name="giflib" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="8.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
</package>
<package pkgid="cce961a794f8eae7a84076a115a42c8d2f2969faab772f3a10fe6028de47edf1" name="giflib-devel" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="7.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
</package>
<package pkgid="2bd2032baa325a5327a391f5146cdef43d4b24e04eeb643704ac81483b4d82fd" name="giflib-devel" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="8.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
</package>
<package pkgid="faf0546473bf3b25eb87005fc663ad30fc0ef0fc0f56d442f0ae158dbb8f1c84" name="giflib-help" arch="noarch">
  <version epoch="0" ver="5.2.1" rel="7.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
</package>
<package pkgid="0a8ded97fbb5b4c20289c439836e98d1a228e6a041eecddca12be645ec699b03" name="giflib-help" arch="noarch">
  <version epoch="0" ver="5.2.1" rel="8.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
</package>
<package pkgid="011b043dc1b8d09b80508898a46e1a16ece4b4a2524bfb814d44aa15f461fc61" name="giflib-utils" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="7.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
</package>
<package pkgid="04d4a71a01816dfe228b9218e5d91cc619ef81beea7c159a68700b4557316c9b" name="giflib-utils" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="8.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
</package>
<package pkgid="e456ff5431134e9a123cba0eb237f4e8082b37731369330c111e9c183e8d1a15" name="git" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="0704a822d09ee9a769665eec1a60d9825870ca053958094ad1da30191a78f2cc" name="git" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="7dedcbd45b4589fb579c8461bd355069465c9616e8cdc671c44d9d8fe47431f7" name="git" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="36cab6cfa8cb697b62f070069141579a05b6140b378014cabe7838980f3f0182" name="git" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="ea6160939ff6c97fafa52041629c7c28171c12a64e62d158391d2b0f98c15864" name="git-clang-format" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="c6ca6f1fbac41607af4e990ccc7e485665dfb2ca781187a4277bda2edfdf890f" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="8e7b2da9bc4710d99947c4e4eb7a0f3160915936d47e9b13a6570186d2229f42" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="7392a5fbbf9f29848ad1195578273fa1f1caa118f9eb72ec98292954dae28cea" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="2ee9e8429d336cbab8a4d7d47e503b79fc42b90eef454af65679aff9f99c438d" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="24c62b6662e83e8c6bbc9ef5b136ad5e622165807fa656916c913c5804d07b9e" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="d67c4b7b4200e5ac9506bc481e9839b0c1e4d056e328af42aef6c57a5cbae255" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="5ccf1d013c240853a2fd3e51e9de3bf276dae954be1eed37d0ff1b14c041beda" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="10518b0d661ba9c9a1121fda3272cab42d2416a7dc0a2a91476c635b1bcd42cc" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="c146ae39330ebf161e68b190bbe5f4eb6af2442077cddfd83036a59d043787a8" name="git-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="3d18ac927a337f05cd889435c635f5cf41f8acd98644d84a8c97656ae532ed04" name="git-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="1093685378509d946390969bd3fdf126d396c7089f494afc8e555342437f253c" name="git-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="1273ae8e1c7879e422467ae7676e6a7b667218c7fc697955bb20162b3c2f0943" name="git-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="82e9a6caebd9d3c1d2e2f17ee43f83cdc4f7f2d19d51c0bbdedf3ba0b5638873" name="git-debugsource" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="de9229e26eb5d0bf46f7dab501bc7c2306d153fddcdb1ff37de2aae365057e56" name="git-debugsource" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="c26e22c3bd723e481fe5baa87cd69ae32a618784ae477a9684e7582f971868e2" name="git-debugsource" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="89feb122210d76a5f53235b8984b3e1968e341e06ded1195040628fa22deab8b" name="git-debugsource" arch="x86_64">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="dc9fbc313d838bbffc143f170ba8b66d0cce348c1020e5e82d08267ba5f4bc1a" name="git-email" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="7bebdaf4aea5377449161cb63994d53de45ac89b04d5b7a0e858b778d7c2bd99" name="git-email" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="704ee9ba2bb5aee25861d4a98f8fbc40c7538e0a1fd83e4a38d91462b51baa7e" name="git-email" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="bc7e126847c5073c9e1bad0fe383424ea0f51f7f22a3beeb19e3da38b35160f5" name="git-email" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="d03ff7784efb210f927f7df2299eb28a398d7ac7e27842d37e6c20b59f9f35e2" name="git-gui" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="a3b7714f40e8eba508d1f21d0ed1fd5fda0ee0b5707ee8adc55bae5d58c2af43" name="git-gui" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="788ae7c3e0aef97eafd17e6f1d7c5fb0765244d2e320ea802a53a128dbebad98" name="git-gui" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="91d03199d449e36fdc2e9477cfcf18e45fdee9d7962587133e8799a92d540490" name="git-gui" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="34f3adc03e7dc5c59901ea393f1a49ed2fe9b9aee5dd81ac5c42fe8313ae21f1" name="git-help" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="fd966739e37c072fe40331067dd2f98cfcee815fb3c617c85bc6d84a5614ad92" name="git-help" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="4e5a0d7da8752fbf379361247c38d75880b8ae383194e7d552b5c38c09eb5c6d" name="git-help" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="26ee7a9ff8fc56a28a32e760500c8e85eacf5e199fcdc8701ae950dc757e1dc3" name="git-help" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="c747d0d5f58e880e3e2a5ba39f1f3320e17ff2d045a2e66e00166b0ee2eb0048" name="git-svn" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="741cc0dc43b3d374a020aeff95c7a4d0c69ffe00b88d4454c52e83662c59fbf9" name="git-svn" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="eb3964b9d0fa847b23c1d35cdfc3998f55eac946295825aa588afda0bf48bc77" name="git-svn" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="57f1823f0238c521889e26aae35dd5d7ccab0f71ce5bfd46dc12e2d9ef571c5d" name="git-svn" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="a8aa6a2ba4ddbd747c74642c3a6ee0f0f96d49b7b371c35efb31842bea17ce33" name="git-web" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="58e20f80219e832e5a6401b6e2c75d6dec483a7db8d46b46a896f92de73781df" name="git-web" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="6f2a64e15eafd8b9847730925cff82c53bf92b23a9f5a6c9c6528869cf5c24e9" name="git-web" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="0ec07683576037c1610378bb46b1e78147a71c2a90c66a1593c45061cf794e79" name="git-web" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="cae0a453935dbcd4ffc21b88ee948ed0163ca79d34758234fad7db33550da708" name="gitk" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="b78802fe034b0c9f0b28c891819bfa2ec4529de9c25db2e0ed34c7e42f1d630b" name="gitk" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="b95f42142843e2203cd989b9b6786af0e30487a183d5fa6fc4f6889fcf38dbf3" name="gitk" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="5b1827f805553b29a8a42685545b0b5f148cddc9b871754187e8cb4a192cdd70" name="gitk" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="a3a5f933e865a49797f17ee2413b2d7495e1d13f188ce5d6a246cc3145acacc2" name="gjs" arch="x86_64">
  <version epoch="0" ver="1.71.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.71.1-1" date="1649246400">- Update to 1.71.1</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 1.71.1-2" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="5405d452b71abee26d714a87050ad79e393bb5c6199256a1f22a7e39bba04ef3" name="gjs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.71.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.71.1-1" date="1649246400">- Update to 1.71.1</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 1.71.1-2" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="cdadbee38d7a13d1bdd2017f0f83cd7b474548f91a2e86f2d0e6dfba93729192" name="gjs-debugsource" arch="x86_64">
  <version epoch="0" ver="1.71.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.71.1-1" date="1649246400">- Update to 1.71.1</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 1.71.1-2" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="74f0be0b84b9f27ec16d62973aefca55772bb21a187dc30f7db313d36fe8b449" name="gjs-devel" arch="x86_64">
  <version epoch="0" ver="1.71.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.71.1-1" date="1649246400">- Update to 1.71.1</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 1.71.1-2" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="0f7eff27c15f2d2ec4b5488b47189739bdec21e2a1f32b933f0c1bfa2eb76beb" name="glade" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 3.36.0-2" date="1647259200">- delete old so file</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 3.36.0-3" date="1708344000">- fix CVE-2020-36774</changelog>
</package>
<package pkgid="76a3176e722e04831af8445e9703150777c0a7a66c63b0209c591243be6489aa" name="glade-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 3.36.0-2" date="1647259200">- delete old so file</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 3.36.0-3" date="1708344000">- fix CVE-2020-36774</changelog>
</package>
<package pkgid="3cffaa7b85f5bc0da5a5c852483e529952edad6abd83f14366e7faae321f1086" name="glade-debugsource" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 3.36.0-2" date="1647259200">- delete old so file</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 3.36.0-3" date="1708344000">- fix CVE-2020-36774</changelog>
</package>
<package pkgid="c72c7a75e93321af2401bc2054e8b5d4b903d955ee420f0c7e61af0ef0bffec0" name="glade-devel" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 3.36.0-2" date="1647259200">- delete old so file</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 3.36.0-3" date="1708344000">- fix CVE-2020-36774</changelog>
</package>
<package pkgid="5dac88c47d736499e4f4058fa807f9f0e360737994740a1bd6dc7e562111379f" name="glade-help" arch="noarch">
  <version epoch="0" ver="3.36.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 3.36.0-2" date="1647259200">- delete old so file</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 3.36.0-3" date="1708344000">- fix CVE-2020-36774</changelog>
</package>
<package pkgid="f70a1556e1505f089f924c1c70b8ac95909578cdbd688ef64f67bb55edeea562" name="glade-libs" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 3.36.0-2" date="1647259200">- delete old so file</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 3.36.0-3" date="1708344000">- fix CVE-2020-36774</changelog>
</package>
<package pkgid="669e9684e1fcbd6ea2a31a6494976c54aded813a98a60f7acbfb7419c4220622" name="glib2" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="10.oe2203sp1"/>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
</package>
<package pkgid="c766651d39727f342d83b70b1ac302f756c05b0ab88d3f242f39b1013f824429" name="glib2" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="12.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
</package>
<package pkgid="68b84e590a2367c0efd6bce50a4800ac37c52c3cc5c2d2428a837c576784050e" name="glib2" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="14.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
</package>
<package pkgid="e9863d85502a01502d805725d7f8ece2a6dd80fa2b5f81998a98274f34087d73" name="glib2" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="8.oe2203sp1"/>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 2.68.1-12" date="1651147200">- Type:bugfix
- DESC:fix issues found by svace static code analyzer
       fix segfault,memory leak,EOF,arguments leak</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.0-1" date="1654171200">- Update to 2.72.0</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
</package>
<package pkgid="ff2edf503aa2086604bc57edfd6cbb99839d961c5eafc8815227e923c79ff126" name="glib2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="10.oe2203sp1"/>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
</package>
<package pkgid="bb5ae192f3974b22beb0730239640c25463f07aa5bb148b007404f3fd1ca9689" name="glib2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="12.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
</package>
<package pkgid="2841f78daaf9486808e2dfbdf3cb7c7b1d29aea87d081b3233320411a499ced2" name="glib2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="14.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
</package>
<package pkgid="f864849fa6503d2c3e6a56364d34ab2fe8bde0f1184e845abdc307bd2224c6e1" name="glib2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="8.oe2203sp1"/>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 2.68.1-12" date="1651147200">- Type:bugfix
- DESC:fix issues found by svace static code analyzer
       fix segfault,memory leak,EOF,arguments leak</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.0-1" date="1654171200">- Update to 2.72.0</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
</package>
<package pkgid="34afdf8de4a8b49300a5ff65a7661a29b8d1017afeefb1cf0dafaecf44d0e2f7" name="glib2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="10.oe2203sp1"/>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
</package>
<package pkgid="cfb78f43015d4639c78e2349e158dc4eacc05d438767d2d3d1f4fb334ba35a40" name="glib2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="12.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
</package>
<package pkgid="85aab79b0e7dda9662d435f7255db8cd66c3918ad8679aefb5d0a7a6eaea76cd" name="glib2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="14.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
</package>
<package pkgid="f7a5179a31a76ed60156c46b29cbd77ec6573275de8245d93633a42afbf4a8cb" name="glib2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="8.oe2203sp1"/>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 2.68.1-12" date="1651147200">- Type:bugfix
- DESC:fix issues found by svace static code analyzer
       fix segfault,memory leak,EOF,arguments leak</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.0-1" date="1654171200">- Update to 2.72.0</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
</package>
<package pkgid="df29b35eee41015326fe68bcf4d1e4ef0d553482826ada0b79369dbcf5734943" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="10.oe2203sp1"/>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
</package>
<package pkgid="44029487bd032b0a31fbdb0f7995563d6acf1c7c60b1a2c05c2b99b983baccc6" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="12.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
</package>
<package pkgid="0482ba40e088784b0253574511a16c92978a9e414c4b766f534be50e4afc4c3a" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="14.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
</package>
<package pkgid="f9cabf17b117e4942750abf261ccb9530be612b4b9f21193499c4941521b61e7" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="8.oe2203sp1"/>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 2.68.1-12" date="1651147200">- Type:bugfix
- DESC:fix issues found by svace static code analyzer
       fix segfault,memory leak,EOF,arguments leak</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.0-1" date="1654171200">- Update to 2.72.0</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
</package>
<package pkgid="fe3b44988dbf9732d93bf40658c4f2f2d53810deb430e77700f2b8c5699eb4a3" name="glib2-help" arch="noarch">
  <version epoch="0" ver="2.72.2" rel="10.oe2203sp1"/>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
</package>
<package pkgid="c0498b2e367eae30eab13b6c8c64ad9414209896e0cd0a08fa2ebc6ab1b3bcbb" name="glib2-help" arch="noarch">
  <version epoch="0" ver="2.72.2" rel="12.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
</package>
<package pkgid="4207d0805cd1a619c1235a3484df1557799689b2426316d11ce1241c0039aa50" name="glib2-help" arch="noarch">
  <version epoch="0" ver="2.72.2" rel="14.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
</package>
<package pkgid="6cfbce7c5e37094a76340ae65c82adbcb9b926333608f8ae972dfebad7e18b28" name="glib2-help" arch="noarch">
  <version epoch="0" ver="2.72.2" rel="8.oe2203sp1"/>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 2.68.1-12" date="1651147200">- Type:bugfix
- DESC:fix issues found by svace static code analyzer
       fix segfault,memory leak,EOF,arguments leak</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.0-1" date="1654171200">- Update to 2.72.0</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
</package>
<package pkgid="03742dff03434f2de932fa27013414369c86f807bf0485d7d3346b848996392d" name="glib2-static" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="10.oe2203sp1"/>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
</package>
<package pkgid="fe72be5e1c8965a42d22fd31ec987aa8a214ac5d5e9999c00f7facc3dce2a3ff" name="glib2-static" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="12.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
</package>
<package pkgid="240e8196e8e0e111a7d712a323fd295ed12790ec90c5c3c99f90018c7c3fc76c" name="glib2-static" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="14.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
</package>
<package pkgid="0522ad03635aab9ee5929cc0e852a4932028fffe3dc356b4a31ba765a3b8c39a" name="glib2-static" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="8.oe2203sp1"/>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 2.68.1-12" date="1651147200">- Type:bugfix
- DESC:fix issues found by svace static code analyzer
       fix segfault,memory leak,EOF,arguments leak</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.0-1" date="1654171200">- Update to 2.72.0</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
</package>
<package pkgid="b1623a04f30e21a9b70065a36d514dfb06cc329371310cedbdab1ccddd2c6d5f" name="glib2-tests" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="10.oe2203sp1"/>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
</package>
<package pkgid="622d30469058634ff41e6a90c6a7b40d9dad2a1d73fa60b111163d6c392c4f61" name="glib2-tests" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="12.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
</package>
<package pkgid="ea32c1957d40aee35404c23eff0dd565a3f9869faf7946781b63347c4636d9d3" name="glib2-tests" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="14.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
</package>
<package pkgid="ac910e71c1ebd8469f724f4465a238d34cc32e3313e8841e594d95e949f67da0" name="glib2-tests" arch="x86_64">
  <version epoch="0" ver="2.72.2" rel="8.oe2203sp1"/>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 2.68.1-12" date="1651147200">- Type:bugfix
- DESC:fix issues found by svace static code analyzer
       fix segfault,memory leak,EOF,arguments leak</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.0-1" date="1654171200">- Update to 2.72.0</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
</package>
<package pkgid="a27a7ee58e2ea32c2d4bbce7fb7858a37aa7f213e76263c3ade6ba1cfc1cc052" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="ad4990acacb9e1e474ac83d1e3fbb552524e25670167c81699605abef421f409" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="6981f2d7412c513867c5991a8e34d6468c76182916df5d160ca0638817740dee" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="0b3e327dfc87d33dcc8b9e048b61f5eea360aae8b9fb0d960b13ad52e5bbc0de" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="7055f3dbfabc30ea1acc8cfdb6d888fc90e736537b2e6a55b03bd93615eb5f92" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="bbcd2014da64de48dc005529d56ee65c71f04a7c33ff8f5af69e540ded0bfc40" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="bf9baf2438f269f5dfb66e6f1d14289d17f64b5aafc3f8fdfbdc8cab6f5fe6b8" name="glibc-all-langpacks" arch="x86_64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="eef5b4977e89752fd5d97a537fbbdaf6295d7b3d3f774d13bddd047151e58d98" name="glibc-all-langpacks" arch="x86_64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="72d98fd4c2059c61e286806c9410e3e648918c0c2287892fb286e8284b5e5bd1" name="glibc-all-langpacks" arch="x86_64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="7c0ba808d57d5f24234eb83f8e2d3df3ffe595453e831d71437fcaa3f5fd3936" name="glibc-all-langpacks" arch="x86_64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="b62748b5774fb1e5ba2bd45fdedc587381118397f42c0a1000cfaae2f54faf4b" name="glibc-all-langpacks" arch="x86_64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="cbc2d847038ef0f7f95f345b8b6802980bf96ebae59e1d3b75b119eca0100a61" name="glibc-all-langpacks" arch="x86_64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="4f0859ea252ea5a0784e3b3a9cd88f106d33819866690d6cfa18d782344c9a5b" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="5f2cbd7551f0361c1af1e7fe6269646c7b578ee3cf178e6743ba617fa0b3b217" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="2119de51aabf16610b8f34ef2d50840bf6ce0258cc8c86f361a48bcc88058ecd" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="2f14ca080ae4f0ece03fbd72245e81433783be46ed814c694a376ba1ef2982e8" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="cf9de9e483d3f9c7bf350744c400707d02e64fbaf107aa0b6a9e473b792671bd" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="fb4b4caed7f84f3e751038d3c8094de75e00481a3ddf2b0857377f19a95269e8" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="b8a1fb0263b1d2b03f7d32bd1b8c65fa11de5520c855bdcef886307c6f6801e9" name="glibc-compat-2.17" arch="x86_64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="6ffa64214b2255c76de218c8290177abb453c5c0e98e853b2441f0ccf9f07ec2" name="glibc-compat-2.17" arch="x86_64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="28bc24e0e775e7bdfc23176c104bcbfcef6fecc594aa135963c8d6d9bdd9486a" name="glibc-compat-2.17" arch="x86_64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="9fd8a440e28fa31340a6c7957b41c82565a956b798cab00cfba186391d2ffefe" name="glibc-compat-2.17" arch="x86_64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="8117e2c6312e4fa00ae8841ae88262a8e1d4163c550ff8317909c20206652e0e" name="glibc-compat-2.17" arch="x86_64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="1fc82b66ff00bb3777ad759fcba783ce730469cffe0e9723f72ca803352a22a3" name="glibc-compat-2.17" arch="x86_64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="ac3bce76d4292820105fcae04bab2a7ac647cd11a3767f0988b8330f9daef754" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="928fb53f89384b882f69b53f3d6abd7b47bdd392f03369f4ae5fbc72e400a2a0" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="1cedcc0e4ada3de97da03ceff5f209643bdf070492c57880f2e74fba3a682ce7" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="45cc4a9398d9cb3326c5502599023c6706d3314b098f61435f53e50ecfa05cc4" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="3de2d71a430782272b86ca55041f4597510e4bbc52c69adc4bfd4ba54223ebac" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="aec06115083cc0650ce0085ed949a98561710eb30b89a23a849f99b3aa4dd906" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="49432afd2d60227cbfb3edb004ee00c190605b29b1bec395d44d84df5c6d8779" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="53efe24581a648a6e4b7f0fe75c294bd253dc2ad1a05a0153a26b3ceff84e467" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="9659fffe39c01cddbcbdbb53fd61db1406a98ef7fca7ba86c7ba2c375801b0be" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="b35fcc4f3fd977d0a354e7dc82df4e74466bd7c0d78d79dc145b6b5b9b11c549" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="5ef180afba33e3f156972cbded0d60e69e35147ff027b3226262f922cf732958" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="689e3784ffa3602cb5d127c4ad38a4736e8172b83949c6024efcf5cac1422738" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="2caee0db6811588e68bebd0b2e136dbd1363a61c361088eb2c6053e3ec2314d0" name="glibc-debugutils" arch="x86_64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="d89eec13632fc0ce5365beaf81c3e44d90f79d56aea4f297e96e9b1093b65475" name="glibc-debugutils" arch="x86_64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="1081796ead8b18f8f7ce4697399461130d2b09a72d7d54a5444cbde56159c69a" name="glibc-debugutils" arch="x86_64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="25e94955558f276c19c1f845376943faf6928e02fadbdc7eb5e9e6f0a339092c" name="glibc-debugutils" arch="x86_64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="54594c862dd09f8158f194554a19a51168d609553661c76900efb9c204984c92" name="glibc-debugutils" arch="x86_64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="d41df10760419a57d6ae19d53bdb39af2bc9c8958da688a2733efee3a6c8c6df" name="glibc-debugutils" arch="x86_64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="ec82a571169a91e30466b35ef0a479596c69894f8c38e4d9e8cbdb54df187466" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="8cd676581bd9154e717b0e4994ec9b8a99cf0bf24254451dbe9283a8c08e06d8" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="a0ae6ca3a0d209e5e1f96a6744b89fec9ec7a131765b7c0554b7a6f422100a7b" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="fbee9596a4af4649db7165ae8f753402352fb82de2e2e414b0909e518332dd07" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="a5d4dc1fade8a61288b3528d66e173453ce1c83f0e459fbfb43f9ca4e4e0f30f" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="0a21c9842d1aee04540bc823b3c107494aa9c384de22e11b93087823166623f3" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="218b1f48d275436a4a1e81e8f9b5a790a6aa70efe1cfdb9d7167d5b7b714b712" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="2e5d6ea73c098da868a3c4937818be25eb5d798ad5ba1ced861490f9c1470ed9" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="509180e84645f0a8720c85b1f56eb258f059bfd79bf7184a32456a0acc4824b2" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="337cee11ba4b2212cf20a7f21f7c27bbb9aaf2ac010ff122e1d962d1f9d33888" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="c2e297540b8321831819ea9646f9783404af8e3b1e309df1a346d4244229b27a" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="2e0039118d49f40860e34609f59ad79205ed49ecb3d958c3c1554a808750ab22" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="bbec75c571c990fcd88510aa2424db03cd5bd49a6903091de17e79a4127e6ba1" name="glibc-locale-archive" arch="x86_64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="acef7c268c593897c8b292d16f46eb8804137884c1c57bca8a3e5e1d809c8847" name="glibc-locale-archive" arch="x86_64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="5a36ee8db654bbc07a3ef1ea660280a9b072f89c20012f1148962cda1b73b939" name="glibc-locale-archive" arch="x86_64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="783605098bc3216d1b825697182fcc453ac0e9f4c40b565884be8602c30b5c22" name="glibc-locale-archive" arch="x86_64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="5ca86f70dab325739336e0fcfb8ef5f147cb4c8b06ad1068349a769161734849" name="glibc-locale-archive" arch="x86_64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="940a9f37c200f35d45ba98116e62b3dac1ab012b286becd0f6550562a251e4c0" name="glibc-locale-archive" arch="x86_64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="5d5ec42c4b1bab096061ce266e9c67b5258faee3ca228671cdbdf2068c08d4a7" name="glibc-locale-source" arch="x86_64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="6c3eb8081c8db525f0ad007a2afade1c31defc4def257b5622c8c742d3a263c0" name="glibc-locale-source" arch="x86_64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="0aa5c6fdb1407751be6ec92bacc54d907abf05f7e54851b4fea5898258257474" name="glibc-locale-source" arch="x86_64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="7ec05a548d2fccd83685195dbbe1ecc804305d60a960dc2436a78567d8fc3d4b" name="glibc-locale-source" arch="x86_64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="36de3e56ceb12fcf2f2b960bee6a7de8bddec86d30785a12544b883d5cf34e68" name="glibc-locale-source" arch="x86_64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="a9ff685fb3093ea4018d15d9a77236f253d1b65fb30c1eb95c2d508836029de8" name="glibc-locale-source" arch="x86_64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="d6282103d5620605a6bde59fcdd2b92c2b5651c32e7bb6a5a63f819d7ef8ae47" name="glibc-nss-devel" arch="x86_64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="6ad847b57714daf5b111257ca91f270e47d466d76718d5109289dbaf38f0ff97" name="glibc-nss-devel" arch="x86_64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="6c2b623820c5e5759847bc22c2745bb203da9762c09dfac4fa0fefb90f08e4c8" name="glibc-nss-devel" arch="x86_64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="d47c85f7d108dd49276914c4f9a3e3abc300e8817ebe70a2a9f07c04e8947f48" name="glibc-nss-devel" arch="x86_64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="f9d142be8fe34c0a2035d24aa9650c8b2b54c1cd1761381e1a49d2922a00f4d5" name="glibc-nss-devel" arch="x86_64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="5bd84aac02c28ff12cba2796b9f7f148ec0114fbcfa0bafc505b6d8930675956" name="glibc-nss-devel" arch="x86_64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="eeeaee8ed02cab589bec57899abbd3e193cfe80ecf57ae118a18d4a1d02da0ca" name="glusterfs" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="b32c06dc10c9431510c03540e4be6d3b64684e0dc699f8f9fc43565c6b27e21a" name="glusterfs" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="ceb8347a85ce9359cd8e915a6f725cb7aec296daafc3697dd8a2036d2570f10c" name="glusterfs-cli" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="aade71c42fe5724467ff624d8513bab109a41b16a6ef428607f396f0bb51cb08" name="glusterfs-cli" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="6dc825a53faefdd20c212fe3b76c354e61b2d1e4162e7e286e353ea4d01bd364" name="glusterfs-client-xlators" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="596f61dfcedeef0fc65493a440b902a9bd893fccc46e958457722ff81f1e0785" name="glusterfs-client-xlators" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="8e24632009ee328f1b17fccef1333688d79b29682cc1344d34385e35abdd0f54" name="glusterfs-cloudsync-plugins" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="0efc4976adfd4fc138ff29a786ea50094bf41edcfc48d64187fed8785d1646c5" name="glusterfs-cloudsync-plugins" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="480c386d2dbc74945d25d343c0ca03db4487c290a33f433c1e0b5c6c3e604991" name="glusterfs-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="b776d1539a576b35e6c2acef8004e0ac58af679057030aed0ee2296d3a23053d" name="glusterfs-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="6a9926ac30c18b69050ee9a857e0d32de80d3c3d7683d7091dd9861a72f2f08f" name="glusterfs-debugsource" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="fb079cdf5b032f6da4fda5db7ce139faab22b490b169bf64c7f0159b289cc6a3" name="glusterfs-debugsource" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="405f00b7a6cf10d8357f427bc37737be1c3ab5b2caf46e3d3e6f8c9194a5dc50" name="glusterfs-events" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="6b19bf4c53465e91d82aad77f78f3400678d1dc5933ff9b4a632fca099dac0d5" name="glusterfs-events" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="aa645867c175d963416184ecc0bb49aa89c0b61e59932302ed5dfcb7ee1f975c" name="glusterfs-extra-xlators" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="16dc6c4e8c830c948e206953c84162c88af6141f19df3c2dc53f279e6850cb23" name="glusterfs-extra-xlators" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="dedafd770ceec179c2f6afd115b5abbf80b74526f4cdb836d94055663718a257" name="glusterfs-fuse" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="79bd45d969a1ce8c5240b310aae808e5275cebb9cc006e2fd27f115e849ceb2c" name="glusterfs-fuse" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="cbb0988e53a90392f317aef68a3337887e5854299eac6c1d1a862b4444b34d94" name="glusterfs-geo-replication" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="e3206e12cd866c9431d01a0f9e3fddabe0505b5fdcbdaa60877588ce05adac5d" name="glusterfs-geo-replication" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="344efd4aedb4a86febd427532f94a9466ee5ef4563f22f69578e9820c4974bbb" name="glusterfs-help" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="a68a134f8b0f3536bbd63227c0a5b713d58ee9852e637631a65e5aeb85f4b7d2" name="glusterfs-help" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="e97911fd467e750548d4ccafb1d1c3aca4f65211f82020ae2f237d7d4ee495ff" name="glusterfs-resource-agents" arch="noarch">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="a2086b956a41714c5179cda005cc5c629af72ed4d24520d19126a1ade4b9cdce" name="glusterfs-resource-agents" arch="noarch">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="c5d1262b4ee76e3a4544478c5de2a3a1b929bb0b96755441d2a6e605f5d545d1" name="glusterfs-server" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="f3316f063d7fa4f630df5fc8467dbc626517630e514f803a0e8633d9c96dc935" name="glusterfs-server" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="7719f7db113140c983f4b77dd99fb5b5aeb2524f7e1ffa6fc9857bdfcc6aa07f" name="glusterfs-thin-arbiter" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="c2424fc85021d739f749f365091792ca6a188cf407e95a9010f694c5d46a151d" name="glusterfs-thin-arbiter" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="65ba7b7dc7eb3b512963a1f258b0640bc831380f8edf608fc5eeb076dfdb103d" name="gnuplot" arch="x86_64">
  <version epoch="0" ver="5.0.6" rel="14.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 5.0.6-13" date="1669118400">- Bring source file into correspondence with described in spec file</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.0.6-14" date="1689249600">- Fix CVE-2020-25969</changelog>
</package>
<package pkgid="c283657be3cfd9d3ef34a4019f9bf9cbf2df18d725b5465ab983d1e5a3f03153" name="gnuplot-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.0.6" rel="14.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 5.0.6-13" date="1669118400">- Bring source file into correspondence with described in spec file</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.0.6-14" date="1689249600">- Fix CVE-2020-25969</changelog>
</package>
<package pkgid="8b4608a1d0ce1814254b68f3925810cd7e4cf568005d5e49f3210fcab77d8da4" name="gnuplot-debugsource" arch="x86_64">
  <version epoch="0" ver="5.0.6" rel="14.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 5.0.6-13" date="1669118400">- Bring source file into correspondence with described in spec file</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.0.6-14" date="1689249600">- Fix CVE-2020-25969</changelog>
</package>
<package pkgid="a0b79c902788276d8acc0404441041f79c6ee37bdab71d0de0c6aabb71e4074a" name="gnuplot-help" arch="noarch">
  <version epoch="0" ver="5.0.6" rel="14.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 5.0.6-13" date="1669118400">- Bring source file into correspondence with described in spec file</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.0.6-14" date="1689249600">- Fix CVE-2020-25969</changelog>
</package>
<package pkgid="bd981397b19b83c99944cb9ace5b89c032d4feb05e8f350bd64a715a8e8e1e57" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="10.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
</package>
<package pkgid="6f42bde7d9ab2e5da91cd8bb0faf88e0ee7a0e096b99bea2468ed909ddc8e96a" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="11.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
</package>
<package pkgid="305a224df85db15ddb5073ec8f6c54232b635b59c2ea04d474304e5d17a2fe42" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="13.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
</package>
<package pkgid="d6c608ce8f52caa7531fe30753ad143a470b01ba812ba398f24322175be004ff" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="14.oe2203sp1"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-14" date="1712664000">- fix CVE-2024-28835</changelog>
</package>
<package pkgid="b9073ca7082a502fa48823e1897e220ec5ded564b58e4647bd978ce35f6a90a9" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 3.6.15-3" date="1616414400">- fix CVE-2021-20231 CVE-2021-20232</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
</package>
<package pkgid="45a27a274014cb7c609d323306a1606e1900e8a2fd338f3374d9ed607f9bb9f8" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="9.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
</package>
<package pkgid="f64c1e178c168f7c411b69b1f7cf3f55e037f5a1adb4064dd0a59a8a821400e0" name="gnutls-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="10.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
</package>
<package pkgid="04571189790d8e81f3358958e892596d59f06d7b19c2ff438512ed7b1f05bbfa" name="gnutls-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="11.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
</package>
<package pkgid="6fddebf21dee4e2108dee99c0589eb63ab1c2a8c5ec0cfebac084efb0136732e" name="gnutls-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="13.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
</package>
<package pkgid="867b0355e6ebf05f4d79eb8ecaf9e2de5b899264860aba762f2ec7013901cced" name="gnutls-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="14.oe2203sp1"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-14" date="1712664000">- fix CVE-2024-28835</changelog>
</package>
<package pkgid="e7bc4af18f4c78b8865a1586f9851e9987895f7dde11d318392d852d3fd4a49a" name="gnutls-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 3.6.15-3" date="1616414400">- fix CVE-2021-20231 CVE-2021-20232</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
</package>
<package pkgid="1683357f8c06191b63e647894497f7f0aa420420770703d453bcfc82c7bb616a" name="gnutls-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="9.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
</package>
<package pkgid="a17a551d9600ae8d74df605a6fb340c2be6977ab287c9c7c16eaa8964cb59393" name="gnutls-debugsource" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="10.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
</package>
<package pkgid="12223a814c91978504ce005d645fd96c20cd3e3bd81dc191ffcee92415ccdc66" name="gnutls-debugsource" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="11.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
</package>
<package pkgid="c2468650ab26f610c707a450595949031103b4aa5c387da2997d6c6f8ef3f692" name="gnutls-debugsource" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="13.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
</package>
<package pkgid="4b8156fbb567cdc40711a71146110b1ef9a40a95dd3f3ce8c51722686ecf7d37" name="gnutls-debugsource" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="14.oe2203sp1"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-14" date="1712664000">- fix CVE-2024-28835</changelog>
</package>
<package pkgid="e7c3cac4a1413ae04adab78668326129d3a066cce6c4ab9c0c59b68bbaf67f1c" name="gnutls-debugsource" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 3.6.15-3" date="1616414400">- fix CVE-2021-20231 CVE-2021-20232</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
</package>
<package pkgid="ad8b10e46f2f6988eb83fa8c6be672131804abcd7c97484f4a3c3f9133151e40" name="gnutls-debugsource" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="9.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
</package>
<package pkgid="749b0f24384063d887872f1a1bd3cce67c3bc77638dc95c2253dc504318bb190" name="gnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="10.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
</package>
<package pkgid="fefdf236f506625952ee80847b2188b6012fd50167a5d332a5d5631c64ed6767" name="gnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="11.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
</package>
<package pkgid="1fdca7d6a1cc4c424282d854b08b715edfcdadde410351ded28a4688ff94827f" name="gnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="13.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
</package>
<package pkgid="6a156ee596e9efb441027f7cce057c5905af9dcdedac89eb1c47f4a47c940cfc" name="gnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="14.oe2203sp1"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-14" date="1712664000">- fix CVE-2024-28835</changelog>
</package>
<package pkgid="8e52c88f385b829de968eaa33db88b01a40d368c1d0965e4212cbc8c6fa1b02d" name="gnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 3.6.15-3" date="1616414400">- fix CVE-2021-20231 CVE-2021-20232</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
</package>
<package pkgid="f299daa57552727a8c5a10b7b078a34884d63bc5caed213541f01527333b6658" name="gnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="9.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
</package>
<package pkgid="0b01437ef68715f06bded570a21853c1716052489126338fb3be089500cf391a" name="gnutls-help" arch="noarch">
  <version epoch="0" ver="3.7.2" rel="10.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
</package>
<package pkgid="c6ec74e3365e9dea63723bc84b774a90ac5a04738c015f6c67138e2c694eb146" name="gnutls-help" arch="noarch">
  <version epoch="0" ver="3.7.2" rel="11.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
</package>
<package pkgid="30abf060733d5b4b604ba438d56ee0fff173c2fe2e0c3d6fef383d7aa6c369a9" name="gnutls-help" arch="noarch">
  <version epoch="0" ver="3.7.2" rel="13.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
</package>
<package pkgid="1f5e95d735bc4de254e212c2015fda9a9824e30ab54f5f8620c785fcefb2954d" name="gnutls-help" arch="noarch">
  <version epoch="0" ver="3.7.2" rel="14.oe2203sp1"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-14" date="1712664000">- fix CVE-2024-28835</changelog>
</package>
<package pkgid="509f220398bb26d4e573ae48caf952c8e7eee3639f20c80947df981cb2ead77b" name="gnutls-help" arch="noarch">
  <version epoch="0" ver="3.7.2" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 3.6.15-3" date="1616414400">- fix CVE-2021-20231 CVE-2021-20232</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
</package>
<package pkgid="27a309fda120884f8fc810ac9256ada01ec7bc549ec9ba0d54108ba5ae07ee98" name="gnutls-help" arch="noarch">
  <version epoch="0" ver="3.7.2" rel="9.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
</package>
<package pkgid="ff3f3827faf5a33c3264015e0ec20f82404ddbc31e17a4b1b56912c1218b3463" name="gnutls-utils" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="10.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
</package>
<package pkgid="08da22a3d442f854df67b997c8ba62388fbfdde235258da90405bc839ee06f58" name="gnutls-utils" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="11.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
</package>
<package pkgid="c5bfa5a0b4f4acc4bcb996446a19c9fe96773ffe94a0781c24d8eea1124c207e" name="gnutls-utils" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="13.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
</package>
<package pkgid="50c2e2a3f15c94e4f011b1e94bbb3050aeebf4c052d29dab4dc84fb32525c802" name="gnutls-utils" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="14.oe2203sp1"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-14" date="1712664000">- fix CVE-2024-28835</changelog>
</package>
<package pkgid="2c8db8b4047be79023de0aea4c46172c0cda7184873718c9ab7b502cacfcd69f" name="gnutls-utils" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 3.6.15-3" date="1616414400">- fix CVE-2021-20231 CVE-2021-20232</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
</package>
<package pkgid="2abd7b306df6e33c9ddf1f39abdf91cae21de836e7a3dbd1eeb32e03759e186c" name="gnutls-utils" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="9.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
</package>
<package pkgid="050d28279212a334568d7872b8be34e4179a93eb1c10420242162472ee08c6dd" name="golang" arch="x86_64">
  <version epoch="0" ver="1.17.3" rel="14.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-5" date="1658836800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
	CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
	CVE-2022-30631,CVE-2022-30629,CVE-2022-30634</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-6" date="1659960000">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32189</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
</package>
<package pkgid="b4f530a4999784f891d2b48040e64c75b513f2955bf958c04c39b33a0e406636" name="golang" arch="x86_64">
  <version epoch="0" ver="1.17.3" rel="15.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-6" date="1659960000">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32189</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
</package>
<package pkgid="80ac0672ce9dd1b73ef268c1d77a392c2091a5051ed0282255cba3169e932684" name="golang" arch="x86_64">
  <version epoch="0" ver="1.17.3" rel="16.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
</package>
<package pkgid="55109484bf4e808bf189281823c1e84de87bbe88dd29259a17cc8ce9e81abbfa" name="golang" arch="x86_64">
  <version epoch="0" ver="1.17.3" rel="18.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
</package>
<package pkgid="b85db8438ae9c13a746b0d535a6b01a80e1bff188f515def9a440a30406da724" name="golang" arch="x86_64">
  <version epoch="0" ver="1.17.3" rel="19.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
</package>
<package pkgid="468e93a1192cf19fc364a1d2854c6d36dccaaf583045678b223edcf8c648a37c" name="golang" arch="x86_64">
  <version epoch="0" ver="1.17.3" rel="20.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
</package>
<package pkgid="eb50d20847fc53c1b5e623b58d82b4be0372815392ae3e11457fdb988da975f8" name="golang" arch="x86_64">
  <version epoch="0" ver="1.17.3" rel="21.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
</package>
<package pkgid="7fbdb31294696b41abeefb5f13dff5f2874624d3ba87430a31719c42b8462cbd" name="golang" arch="x86_64">
  <version epoch="0" ver="1.17.3" rel="22.oe2203sp1"/>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
</package>
<package pkgid="659c2899c92adb6c085f8561bb4b07a72a4c1c4f66b80c609de300805364dcd3" name="golang" arch="x86_64">
  <version epoch="0" ver="1.17.3" rel="25.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
</package>
<package pkgid="3802dfd7ebf811244e3595c3f6592d657fba0e1637f3f427d45573d73f691fba" name="golang" arch="x86_64">
  <version epoch="0" ver="1.17.3" rel="26.oe2203sp1"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
</package>
<package pkgid="7c2f0a50fd01c5888c79cc53d2f892ec6fac05258ff28a731cbd007df4baf5ef" name="golang" arch="x86_64">
  <version epoch="0" ver="1.17.3" rel="28.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
</package>
<package pkgid="f57c04b6a440b8725d7472ce02de529aad072269dab354b0f05cae8f2c6be9d9" name="golang" arch="x86_64">
  <version epoch="0" ver="1.17.3" rel="30.oe2203sp1"/>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
</package>
<package pkgid="72e3a3ccbc6f5fe3d2cb0b05792bea939c1365386267d14cfe0b799e20d40001" name="golang" arch="x86_64">
  <version epoch="0" ver="1.17.3" rel="32.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
</package>
<package pkgid="5852a2c609d66345d4d9084076aa800cc300c714d7c668257c80f60cf7d65b54" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="14.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-5" date="1658836800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
	CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
	CVE-2022-30631,CVE-2022-30629,CVE-2022-30634</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-6" date="1659960000">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32189</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
</package>
<package pkgid="6deaf1a27d6b8306bfd4128cf1b92f0ad622a31db5e41a3dee4325b2a429c987" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="15.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-6" date="1659960000">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32189</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
</package>
<package pkgid="e698f6ba13ddf074c552650e9663ab0495c5b975c25ce7d36634175cb443a5e3" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="16.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
</package>
<package pkgid="a98b4387a73de0c5948b02c9c650701f240e1f4abfeda58f1a1305546345cdc3" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="18.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
</package>
<package pkgid="53329ab79d89c0e51fc1b85845273b0c1b3ddc3ad339c938b3cef27d0643b275" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="19.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
</package>
<package pkgid="c7d9ab9b687b5a67e87f57ad6d1ae9adc88091fc7ac3cb08768ba609ff4d2b6d" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="20.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
</package>
<package pkgid="ea87caf8f570089a88509d2cc703d6d5794ded1dd814be796959dc1eae7d2d1d" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="21.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
</package>
<package pkgid="8b74c94955da1356abf694b5ca4f7af18fffa0725bde79a11cfc416252454124" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="22.oe2203sp1"/>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
</package>
<package pkgid="8182b69c9c3ea08d987ee26c21281f9e92d2732521743bf2e2e636aafb8a6a96" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="25.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
</package>
<package pkgid="e5966046f35e23a016af8d8d8cbc5525f7396d56a8e38d9492f050c22f574734" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="26.oe2203sp1"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
</package>
<package pkgid="51a964deec981dd8ec12c27659789c56394c059038e24236f0c7376d64bb5c1d" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="28.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
</package>
<package pkgid="24ccad199089c531de0131e161d05e1484206a683fe30e9cdb3ae96027da60f8" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="30.oe2203sp1"/>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
</package>
<package pkgid="016076144151cfa142426c0066c1d3e7a245dd806ba6ee483f745512d7e8477b" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="32.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
</package>
<package pkgid="ef180a41dcf7892f9c571ee28b413cfc6ed1eec2481547a5823ce41b2ecceeb5" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="14.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-5" date="1658836800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
	CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
	CVE-2022-30631,CVE-2022-30629,CVE-2022-30634</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-6" date="1659960000">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32189</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
</package>
<package pkgid="a45a5265a4f248793b01c091804d46c1161f1bd1aa88133c6bbcc6336afd7f3d" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="15.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-6" date="1659960000">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32189</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
</package>
<package pkgid="d5abef12612c334e5493783deb4a5a9f1641096b2166efefa93ed7d3856ad41a" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="16.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
</package>
<package pkgid="dad56f5a83b3a97bc048bfd59e2c5f8e0fb30471da70c19cbcf48a42e780877c" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="18.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
</package>
<package pkgid="1bca0374f3bd65505b1adea5fa20f7f5c0c2277935a4871e282211b2a849e047" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="19.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
</package>
<package pkgid="ebb03e8a9aa6363d91b5007e0bddaafabd4847b87ba0555123f79ed02f31e178" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="20.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
</package>
<package pkgid="2d767ebf65f2421b77c2cd47b72794868744d156efe34c65053cf24562e551af" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="21.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
</package>
<package pkgid="f9051341b56fc72960e876e32db7766d4ee1d640cc9ec8a107cc40bbb57d3a44" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="22.oe2203sp1"/>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
</package>
<package pkgid="194542ea8a6d454926874ba6f87ef9bff0ee6701305c46789c8dbd05e5d9bfd4" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="25.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
</package>
<package pkgid="dea76265e5b0eb1e1ff607da6160622bb3d0c554d0f17393a7240cbcaa30c44a" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="26.oe2203sp1"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
</package>
<package pkgid="9df1d0de1bca0fa37c135c07536bb2da80ace34da18e1fdc9fe8b0d7d21e3c82" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="28.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
</package>
<package pkgid="d095ba51228c55b7d76f08837b3d9d5f1218d991a81adeb9d91c1f5de9730414" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="30.oe2203sp1"/>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
</package>
<package pkgid="3ed696efb66574811eff689bdcb0131644bad7a1284b38d8b0b29089d488c763" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="32.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
</package>
<package pkgid="9c53bf79f1cc6aabafeb0f50c344c6d6bc8aed2c11a85b7f2e23b65570605b6a" name="gpgme" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-2" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the URL of source code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-3" date="1709726400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add gpgme.pc file</changelog>
</package>
<package pkgid="c267b2fdb9a631b0293f4f08ab4ced9ea6c11a23496f292cace953648bc8db9c" name="gpgme-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-2" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the URL of source code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-3" date="1709726400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add gpgme.pc file</changelog>
</package>
<package pkgid="fd57333e2e659602ec0392f634396ee9253cdf65ff63d4d8bf0cf329721baa17" name="gpgme-debugsource" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-2" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the URL of source code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-3" date="1709726400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add gpgme.pc file</changelog>
</package>
<package pkgid="a41da8be05c69caf0a749aa96ee82d537d51a644617d40dbc513141d4a4ffa81" name="gpgme-devel" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-2" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the URL of source code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-3" date="1709726400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add gpgme.pc file</changelog>
</package>
<package pkgid="8231cb94eb969f943f91eb14df5d27e5575bad113f77d5dfa6952ca9d554c90f" name="gpgme-help" arch="noarch">
  <version epoch="0" ver="1.16.0" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-2" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the URL of source code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-3" date="1709726400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add gpgme.pc file</changelog>
</package>
<package pkgid="8455ddea40a44ce36b3c9fe5d09d96d4fc61056485c9a3f1f94e06e8c6b2dfd9" name="graphviz" arch="x86_64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="463f21001e1dc0a2a2825969956ac420947c9bdb942949cdeeea0ed7d46a9707" name="graphviz-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="8fdaa8a5154c5a2e0dd59c166d97a590943af8d83b304f5ca49d68827ff72d7d" name="graphviz-debugsource" arch="x86_64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="5d4033c6b491e832e5357ae97c9c66523bbde74d3d2786d0b6004f032d0a199b" name="graphviz-devel" arch="x86_64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="4dd205d9dba9ed388fb763e713f9ac220e469e860369598700d86f3c96fe1bd5" name="graphviz-docs" arch="x86_64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="13f3e6f10362179ac8dcde1bc5389c9bc27dae798a92d475f67e3c690df8a8a3" name="graphviz-gd" arch="x86_64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="4244ba7af364d680db86305ba787da21278ff429a871805802add79d28863397" name="graphviz-graphs" arch="x86_64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="0407b762590f42c0a643c819e7f3e5f864fb42d805f51233251cd963205901fa" name="graphviz-guile" arch="x86_64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="42dd1d2b5f648b493cefd44d5404095e3c28c79e7a77685bc8cfe30260adc4f9" name="graphviz-java" arch="x86_64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="a349ee931269aa5752ca0d568c88019a36eeca63e088d89ff13e3878906ed5fb" name="graphviz-lua" arch="x86_64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="9af839e6b65794ac005afe0f47efbdea988a4e140ce292d0eacfb3da798035e7" name="graphviz-ocaml" arch="x86_64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="83ec230bf55ef94d0550db0929fdfbb8ea030c044814dc1d7c866e349bbc1678" name="graphviz-perl" arch="x86_64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="5ea9b1305d7060a4d1b2580dd280f63212726d37d7dbaab4e24af26bf7799aa6" name="graphviz-python3" arch="x86_64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="66ce8a4998e3a956343b407b9579fa863d8e16754a40e799b435f21e1a0a32e1" name="graphviz-ruby" arch="x86_64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="7185cefeb29670aa1385a75863b7f67d790285beef29a434db285cc134c82920" name="graphviz-tcl" arch="x86_64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="e58ab87419d1a0a58fe93a89c47fd98796db5b8f9fe952fe46b156245d6c0a90" name="grep" arch="x86_64">
  <version epoch="0" ver="3.7" rel="9.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 3.7-1" date="1638014400">- update version to 3.7</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@h-partners.com&gt; - 3.7-2" date="1644321600">- avoid sticky problem with '-f - -f -'</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@h-partners.com&gt; - 3.7-3" date="1647604800">- The -s option no longer suppresses "binary file matches" messages</changelog>
  <changelog author="licihua &lt;licihua@huawei.com&gt; -3.7-4" date="1652961600">- Added coloring aliases to fgrep egrep and grep</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 3.7-5" date="1672056000">- backport patch from upstream</changelog>
  <changelog author="renchunhui &lt;renchunhui2@huawei.com&gt; - 3.7-6" date="1680523200">- backport patch from upstream</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 3.7-7" date="1682337600">- pcre: use UCP in UTF mode</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.7-8" date="1699272000">- Modify the dependency from pcre to pcre2 and fix bug</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.7-9" date="1699358400">- rename colorgrep.sh to color_grep.sh</changelog>
</package>
<package pkgid="303f226a66f093b792eafe59e02ec5632a91eb1fc8b3be97af4b17bd0aff960e" name="grep-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7" rel="9.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 3.7-1" date="1638014400">- update version to 3.7</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@h-partners.com&gt; - 3.7-2" date="1644321600">- avoid sticky problem with '-f - -f -'</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@h-partners.com&gt; - 3.7-3" date="1647604800">- The -s option no longer suppresses "binary file matches" messages</changelog>
  <changelog author="licihua &lt;licihua@huawei.com&gt; -3.7-4" date="1652961600">- Added coloring aliases to fgrep egrep and grep</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 3.7-5" date="1672056000">- backport patch from upstream</changelog>
  <changelog author="renchunhui &lt;renchunhui2@huawei.com&gt; - 3.7-6" date="1680523200">- backport patch from upstream</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 3.7-7" date="1682337600">- pcre: use UCP in UTF mode</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.7-8" date="1699272000">- Modify the dependency from pcre to pcre2 and fix bug</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.7-9" date="1699358400">- rename colorgrep.sh to color_grep.sh</changelog>
</package>
<package pkgid="63b4b9f843814b60b34bae764d726eef567df02d0e0b1a97a30544ba91cec91d" name="grep-debugsource" arch="x86_64">
  <version epoch="0" ver="3.7" rel="9.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 3.7-1" date="1638014400">- update version to 3.7</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@h-partners.com&gt; - 3.7-2" date="1644321600">- avoid sticky problem with '-f - -f -'</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@h-partners.com&gt; - 3.7-3" date="1647604800">- The -s option no longer suppresses "binary file matches" messages</changelog>
  <changelog author="licihua &lt;licihua@huawei.com&gt; -3.7-4" date="1652961600">- Added coloring aliases to fgrep egrep and grep</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 3.7-5" date="1672056000">- backport patch from upstream</changelog>
  <changelog author="renchunhui &lt;renchunhui2@huawei.com&gt; - 3.7-6" date="1680523200">- backport patch from upstream</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 3.7-7" date="1682337600">- pcre: use UCP in UTF mode</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.7-8" date="1699272000">- Modify the dependency from pcre to pcre2 and fix bug</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.7-9" date="1699358400">- rename colorgrep.sh to color_grep.sh</changelog>
</package>
<package pkgid="52e35ebf5828e3b9234da2bc2f6c6c7b826233c09336417da688389452635aa5" name="groff" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="12.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22.4-10" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.22.4-11" date="1681214400">- fix groff build failed</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.22.4-12" date="1712577600">- Avoid reading from invalid memory upon failure to open an input file</changelog>
</package>
<package pkgid="71992266ce35de23addc8ecb78bf3f1f8c7924ec87e0851474a99e9569f22eb2" name="groff-base" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="12.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22.4-10" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.22.4-11" date="1681214400">- fix groff build failed</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.22.4-12" date="1712577600">- Avoid reading from invalid memory upon failure to open an input file</changelog>
</package>
<package pkgid="506d49278a26de60a0fd8779df80fdcf09edabb3b9e31373bcee4ad5b6101a25" name="groff-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="12.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22.4-10" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.22.4-11" date="1681214400">- fix groff build failed</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.22.4-12" date="1712577600">- Avoid reading from invalid memory upon failure to open an input file</changelog>
</package>
<package pkgid="42a5ef9248614ec595e92658ff3af42b7f9009b1c0bf111bc4c3f9991dbe8e57" name="groff-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="12.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22.4-10" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.22.4-11" date="1681214400">- fix groff build failed</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.22.4-12" date="1712577600">- Avoid reading from invalid memory upon failure to open an input file</changelog>
</package>
<package pkgid="3bf05432269a2102f53cf6639387d58f28fe0f615d0bf03a1770873e2c814c60" name="groff-help" arch="noarch">
  <version epoch="0" ver="1.22.4" rel="12.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22.4-10" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.22.4-11" date="1681214400">- fix groff build failed</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.22.4-12" date="1712577600">- Avoid reading from invalid memory upon failure to open an input file</changelog>
</package>
<package pkgid="9ab6bc146fcc1e93fa364babc1b37bf6ff65d51367f82f0bf802a377ef75026c" name="groff-x11" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="12.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22.4-10" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.22.4-11" date="1681214400">- fix groff build failed</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.22.4-12" date="1712577600">- Avoid reading from invalid memory upon failure to open an input file</changelog>
</package>
<package pkgid="2f7048dd6e3d192d92344ee05d1799889ae76e08f169e1e76501eec1acc7bfb1" name="groovy" arch="noarch">
  <version epoch="0" ver="2.4.8" rel="12.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2.4.8-11" date="1668081600">- Change source</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.4.8-12" date="1708430400">- Compatible adapter for version 1.8</changelog>
</package>
<package pkgid="8c60466f7471a4526b9acc92a013f0ca5acf4ba7dc6956719065fdaad26eb85d" name="groovy18" arch="noarch">
  <version epoch="0" ver="1.8.9" rel="3.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.8.9-2" date="1708430400">- Replace run with exec</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.8.9-3" date="1708948800">- fix help information is consistent due to the singularity of the class method.</changelog>
</package>
<package pkgid="b6c6ca3d3dfb2c4ff3a323e32225f713ef824339334f73de4d0d91af13e97f8e" name="groovy18-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.9" rel="3.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.8.9-2" date="1708430400">- Replace run with exec</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.8.9-3" date="1708948800">- fix help information is consistent due to the singularity of the class method.</changelog>
</package>
<package pkgid="36487ec79c26652b9a740660fc7c4fe6dee818f48dd2de44d878b1fea8c1edaf" name="groovy18-lib" arch="noarch">
  <version epoch="0" ver="1.8.9" rel="3.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.8.9-2" date="1708430400">- Replace run with exec</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.8.9-3" date="1708948800">- fix help information is consistent due to the singularity of the class method.</changelog>
</package>
<package pkgid="567f70b2ecb5cca39e4d7718a60c63eb53afdb8de4eb6e0942ad7f710f3baf07" name="grpc" arch="x86_64">
  <version epoch="0" ver="1.41.1" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.41.1-1" date="1640606400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update grpc to 1.41.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.41.1-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless so files</changelog>
  <changelog author="xingwei&lt;xingwei14@h-partners.com&gt; - 1.41.1-3" date="1650110400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: remove gflags</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-4" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add some secure compilation options</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.41.1-5" date="1684497600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix sw_64 build error for hive</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-6" date="1695124800">- Type:CVE
- ID:CVE-2023-4785
- SUG:NA
- DESC:fix CVE-2023-4785</changelog>
</package>
<package pkgid="025ac2dfb2b0073abc8f71bfe8caf360148c515f688196fc60173b13f165cb0a" name="grpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.41.1" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.41.1-1" date="1640606400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update grpc to 1.41.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.41.1-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless so files</changelog>
  <changelog author="xingwei&lt;xingwei14@h-partners.com&gt; - 1.41.1-3" date="1650110400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: remove gflags</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-4" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add some secure compilation options</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.41.1-5" date="1684497600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix sw_64 build error for hive</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-6" date="1695124800">- Type:CVE
- ID:CVE-2023-4785
- SUG:NA
- DESC:fix CVE-2023-4785</changelog>
</package>
<package pkgid="810c3251b7be99c147236eada9f0f28eb3711e8686bcb99377e75a7b5af4d169" name="grpc-debugsource" arch="x86_64">
  <version epoch="0" ver="1.41.1" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.41.1-1" date="1640606400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update grpc to 1.41.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.41.1-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless so files</changelog>
  <changelog author="xingwei&lt;xingwei14@h-partners.com&gt; - 1.41.1-3" date="1650110400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: remove gflags</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-4" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add some secure compilation options</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.41.1-5" date="1684497600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix sw_64 build error for hive</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-6" date="1695124800">- Type:CVE
- ID:CVE-2023-4785
- SUG:NA
- DESC:fix CVE-2023-4785</changelog>
</package>
<package pkgid="61b02b46a149feda15b36d87ddbe186c9eb627e8963784c85869899a27f6dcde" name="grpc-devel" arch="x86_64">
  <version epoch="0" ver="1.41.1" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.41.1-1" date="1640606400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update grpc to 1.41.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.41.1-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless so files</changelog>
  <changelog author="xingwei&lt;xingwei14@h-partners.com&gt; - 1.41.1-3" date="1650110400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: remove gflags</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-4" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add some secure compilation options</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.41.1-5" date="1684497600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix sw_64 build error for hive</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-6" date="1695124800">- Type:CVE
- ID:CVE-2023-4785
- SUG:NA
- DESC:fix CVE-2023-4785</changelog>
</package>
<package pkgid="f59b09f68b9a8658c635f4f47430077073f890a47fb35de76667a03095151878" name="grpc-plugins" arch="x86_64">
  <version epoch="0" ver="1.41.1" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.41.1-1" date="1640606400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update grpc to 1.41.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.41.1-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless so files</changelog>
  <changelog author="xingwei&lt;xingwei14@h-partners.com&gt; - 1.41.1-3" date="1650110400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: remove gflags</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-4" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add some secure compilation options</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.41.1-5" date="1684497600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix sw_64 build error for hive</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-6" date="1695124800">- Type:CVE
- ID:CVE-2023-4785
- SUG:NA
- DESC:fix CVE-2023-4785</changelog>
</package>
<package pkgid="abbad7e118f6f22b285ca8eb6f0516dd60f958a3c7ded60d3b424abfa76539a9" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="4860eab1c5f3d6c235ec3c9039e520f2c51ac6026784320d712bd7c8c4826878" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="14b68428ae2d29f87192570a5e4f05c65fd0daa0805b17bfb75389b1fc6dd2d5" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="2dbba6ce62eccb4130d2aeaf0527fa0fc4de0ea4134fcaff9f846c4a384126eb" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="8b7c858be73725d717d6456c73bbd08cf89656599a877335fa6bde2b9a7ee39c" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="dd033b6bb4b8f4b5900b0f3b7395faeed9f8b758320a077913b28b498622d6c8" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="9ca0797e0dd2a046c75bf68f630947ae16b135885aa00fa3a6d2c7a64ed759c9" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="e8659595edc6f7cbe6fd0424030b06bce8aebea42f87de882e4eff1bc6b5ac37" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="649e3bb18799f9dc855df1bf6fb0f5996c3479ecc7a06202f957c543054771f0" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="b9494efd86e51860e11f16a50f1bad0912f0994614e1d413d6d18cc71a6f324b" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="55ea047539e35b24ecf852d1c5cd4d82fb2fee89d5b52146bd6a1d1359a36321" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="9e7d85b966e780021e0648546c7c236376adfe72fb2e967dabf1c922462c7e5a" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="4b9bdde7f10c04deb1290ac5c5763baebfb27f24e3a0c5f2fef8864f8bd67bcd" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="2f30fbc992e6d159183f9361a20290203c6e3eaac401404e08eb9da7ac3fa044" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="608b8699d95363e5ea8f47db4f5c5d7898729511af55275c6bf5e64cb03eea2e" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="2a9123679f83dea82ad23600de9b9430dc87835c98038f74d614d9f4a7e8a93a" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="13e84c361dd01b56a35e3e4ca4914ec5775423224789489f2cd7fbbe4c1743ee" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="aa05a646ee97a6a946a62e5cbc9a194bd588813f4584aa136f65665445deceee" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="7ec5af91ab8e821ce94c0f7645d229f2461353ccc04930d07950ddc8d0da1f32" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="8af7d743eccfc8c9788304057d3f7a6f8375f969a2eeba7f8ca44b5f751bf8a2" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="bdc1a24dfe930e82a32963bf7a2933386ec4e7e7f30d04bd3b6bc709b445ecb3" name="grub2-debugsource" arch="x86_64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="bd0a25e2850d7d6a58d6018d45813b351e2ff0a50f33504ee873ae8ddd7eb532" name="grub2-debugsource" arch="x86_64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="3cede3bc98094b3f90e4a439cf0b7c5ce79a10352816da22579b2f42d04d6cf8" name="grub2-debugsource" arch="x86_64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="6ef8ee50707bc791f208fcd02eef1934cfe072357749b6676473558f46cc2ca3" name="grub2-debugsource" arch="x86_64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="e36c09f8a4e823b04708c2260604cf3b1ab2eec69159066d52a8811c4e52b19d" name="grub2-debugsource" arch="x86_64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="3f6854e0823e7711b8cbc4437083c4089c8c326f1141d7caa785292d7f02a9f0" name="grub2-debugsource" arch="x86_64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="583704be4359c345975e679dfdecca84d6838e005add202d202e5f0864e139ea" name="grub2-debugsource" arch="x86_64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="b8411ac3e111ec23a179be5722bb4d0d5d4eb184917f76af6e0fc1415b0a92eb" name="grub2-debugsource" arch="x86_64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="8c3b2454ca14d11b49981e60adcfcbd41bf08b7de408761ac5cbdafb32894e9a" name="grub2-debugsource" arch="x86_64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="8d6ecf5bb5f5ba3c4af8e3ed19576bcdff4bca43b53ff8f80f4cf75103220b1f" name="grub2-debugsource" arch="x86_64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="765ab7ee37118e439fb73d5fff28981e753ba206c7f46236028f08620c3536b1" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="72d0dd65ff4904933e95126dba6dcf2fd98fe53c89132c4fa81ce46a9c4dc31e" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="5096edd1586ed13ddcb9a2b771eb92b480abf54ad217a5504846239573a4f2ad" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="3bf160504d008832b54d640b8b1de68a18ca8e93589fc08dbf848198aa731716" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="384c0044f5e334b34d1c9407aeb89c44b40d13d11825c28680f4457180abf0c7" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="4e125938cdce2b3d2ac3055833f6ebb21acf53ec50e1b08e92bfeba3155f3298" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="ca0aa1b44f35ce5dcb6b61feaa6bfa97cca52ab087e20a6fc07361d9a6115d69" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="8349e3be410e20588a69d2330665afbf5f49c40d0c1684ec9f7e42e5ef5ccee7" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="592b4c0aef3f303d1c055343dbb5ef77277e0cc1c414ef5fa11a32ed4bf8c9cb" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="30743f69585ce2939546e2b9dc937cd008e09d0e6dca550280b21a1ea3ea144d" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="6d3ce5d14a1ca3b6fa4d7790c91edba9c99677456e69864422e713996891c8ed" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="e0dba7755271f62a84adbf97b2e7ca8fed8c97e1f4fc9c1d0fbb79799c46eeaf" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="1432165a15db390756689b4fdd076db6465d0a1753a0e64d00cf414dad5443fc" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="91f1caea7122a48945ed7fd98365e7a4559ec534f3825df244fe12cbcfae6aef" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="476184449a7bfcb66b5d09159127c54bbe81369089fa503e910b55b68ea9a727" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="b300a49ce5a61e83a6ce0e783cd7a08dffae23106435970ebc6b2cb2b65a8be5" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="1bd0c6e127767fcac7af9bcde8e3ce33a1002a40be7d783e9bd37883170942ef" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="45267a254e3c8c1aff8deb5e029cef324d7ce4605ac87186d4a2981e7ef92c57" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="3051b6deacf2f55ceab7ee0ef522727fd4ead76b747854c8d83c2cdac5717cc2" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="f2bc08ce51c16d19fac5192751524ab9c693d1aa36d0a17ffd69b6fe1522f5da" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="2de122de003ee0bea13d4b351aedc9d583fd2bbff800b74df3ee68a78d3574f5" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="4e06838dfcfd7e518fc1f31c729cbddbb3925ebb2e7c7c55040f9b1f1fdbc994" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="e734003c78947730d15bb2e3c3b299152e0b43b0278e808d142fbffabaf82aad" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="4d23afdcc689356c8fa76a95000a0fab8e77a047ff1041e0ac4bbb1580f66505" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="f2b1c0205362ded635dca160deb6d44c3fb5950f3f4cada25875726a68912d61" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="255c31e6dcc3991fd6a1d3d19fa4e257f7520485179bc604f5347163b45f7306" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="af669e5aa8b27422b3b7a9c03cb671dfba6841ce959e4741582210f85efc7115" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="c351286426fc177155d564b2e6e50dcc1e52303422b576238da2c22d3ef44d46" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="5d24140126f3232306fbd5183bdbb2cf37d12b1654b76b998a1396b6d348c0a1" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="531b11aaf0880119b913de50a80992e53506e278e5f46ee4b07042983da0ae22" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="6c2a132d98d80af7b8c16551927e81fc22d0db63e3f17ecf91cf86d33cc3e632" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="3118573109b3b8b3b26730a75f899c636daa8c86314eb1aac64e9da840deeb8c" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="d9be481fbe4f5c9d4dbd789892e7f07953ad0f857a81cf3c3e30b47c5b7406e8" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="9b17fd8fc9e13e21083d740be9e1dfc4627a57135220700ac1a927b3637d3a94" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="b00092264103bec8263072272128c201bafef850a81a8b7378c113b0fdc3fb59" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="4add86fe16965336e9dca20018bf78d0fc7335a5a4f9254a6d8688524795048f" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="f730e6e6587f679b89d6d87ed83bdbe520f4bdebd4ea8c0f59e012679b2b1fae" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="b61107e955f66b58a151da87376acf5b3644d24648860806e466de6670586665" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="989dc471e6eda30dbc47b4750e8bed5bc66f663825aa33b29d5372ceba0bd345" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="e690484b3c79b8c1aa69bfc627890a8fff615def6075246a5dac3fb5f89d420a" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="fac1a7e80f0183933bafb708f9b391bc4e533d5dca6401adba373c8c006f6160" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="b7f9acd907a495235b0715b2ee6eb4b1daeba5a1ac4c0c6042a5f9ec1dddf3d2" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="46964cb63a50473356e5ec0647e90a5f39be2e256d9b9c2ec412e101a8e819f7" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="25fc905d6d5e5127214ffc4ad0dac64c5772bc6053bda2bac570381b1e82f512" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="ef68e069eb50b7366b842f0ae31030bab682e4ef52cf85738950bf910649ba04" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="80f849ce7864cd1e79a3bc166d87f1cc308a7e7a2ed13bfd9f5256cef960c302" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="f6cb5ffa3b457c1501015d7f8d9d74b9564bcd7f15771256062ea48a7fd7f8c0" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="f1d6e8582821b7d659279ec03a38f97623a26ef64ff6e7cf5b3b93324a7f7008" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="89ec09208e7e425470698c7e4b0e2c790a9e344980646d25efdccf3e5d0dc15d" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="984bd3b71621a704bfed7b78b505898369e4514731b0b6011347719a410d3793" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="2a0f6f7e1601baa87b89cc889ea6d67dd9b33a8011cc6fbac4f2791c656a390f" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="bb8785138d961ffdab6a328f86734adc3a5b1cb6c1a4006bba683d41fb9136e5" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="24b90bd60b2dce6b8c17f57ed8e3993c3429b73a8b17a741bf7d1b7874ab35bf" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="f82dc7f700a8f9be1434f37e174d89fbc403b23c26dda912bdd425f452a04b44" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="b2f9dbe103e6b3c5e30f8e323f7f7e2d46c237cb1f5a92d9fea9895683a466c6" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="47225465b96d086a2a11e9f0fbaa5fc1eac86d6971837b26a999db08cd75947b" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="504b766c8e3864e4f7aecd2199ccd59a66964bcad57040939e175585f7d7089f" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="fc6ab54c9425678bcaabbd5a183cf63df1bd2bf8df95499565845a760dca8e2c" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="f2203120fa3ab7d13c20398142e7f99ebb8b41223bfbeae73a58802dbe071e58" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="105290775ce3f7336a36dc58c2318ab76dbae5b7fd1244c0c5e77a836f0b91c6" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="6f772c1b9b3a1cc4014c0979c4c10998b0506a51cbf353c581c695479b0c1b19" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="71dd61a0c753b5756f6d37e93beb99999fc7a04496e4dcd755046d99e06d6640" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="6dbed3c384a1b02b016b36655f92a114572cda217e3427e119dcba137f6734bd" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="5f4f7320aa0c8eb0d3d4650c898370c00c92b8c76bd218791fa8b3b7cddcdfe4" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="1ead930e627d84c947964dbd0d104151a5384ce62175222eae2be5efb7aa9e1b" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="a8e5784a489782d384280505de27bf81ac953961e2207a0e6659cd67594f6943" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="7d7ffcfc8edb7f70e6aeb42749247c91ec39be8b0572d6dc735a085b3cd3e793" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="b882b14e2456dc42e6209c6d367b24b079bdf2cb3d47a5b02ae76b7c31e1d5e5" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="97377ee01e155f66ed2528c796500a362d0dd8fa587e7b8602bff3dcde94dfed" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="438b1cc65b01cac3e87127391d4eeede3a932f0a6755b6d1e66505d89e65affc" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="b2564b0ba1f70499167104263bed125eed4a5a2d5e6fe04c091aa43c9ee14f0a" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="3c5b552f1ae6761ebd56713b240bdf2344f6923217b021145e125b22a58a406d" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="2940303d11db3879766bf38c29e0e5d53a4a61a8ede4ab71510ac498bdeb8aa0" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="a35f8366947fa820d45c5f119b40573b073366b7390dfd987c38cd444c31dd89" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="6f4d0d1fba3b1abecfc306829da07c00f51dc4d48a5b8e2947bfb351a9bb9e4d" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="41b73b79d0c1aecab3a56e4fd867c1a7145ae8b925a1fa5b755e8e2bd461d921" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="d07a6184a33a5b471eba6a4b8709bb11006ab871e1b52268879ef46534324f7c" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="6d10a1a43c362db6b2a8ef73b824a5207e156f079355c5d787cc2b9fd929f9b8" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="59cd47f52e79b917eaa065fe6b0656492bacb6030b90cd5c6ee7937c540abf08" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="2af9def70c5ebb85a0fdf923447c1db0e708747e15fb4aa47c2ea0c66fd24db5" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="d5d6bf3acc95b4b4903bd42c41eb098e3260fea55e4f9092900f8b07df25f929" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="981c64fdd46d3bba5a277914567fb8bb8d263658ca88db960e144e74c40816d4" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="621c9752a58717a347ba9478e1dfa86046f45d1ce0bfa79577f121a2a11252f3" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="cd12c6712e3cc3b990e07f2ea85a14fe8f78989cfa59d6b42bf3e7de76950be0" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="ade38b53e9b5bd70cf89c5b3579f8608ee8ae9a13374bee900d58e92a92d93cc" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="f29ceb7264760a348ce435682c1c8cc3351245b1f5dcfa2e607e3eb0c07bb65e" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="07f67f89d0a76d908547b87fcd3d882b850da444ca5a9a843211b44029ada350" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="d3bfaa8249b34a657e23dc604ddc37d6852115e05a6382f67665ad59b64a1046" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="1dcc5df52163ccc96455c5f59fd3e371ac41f49f7abf57ba08acc80920b9bf1a" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="5f4619a2be7d0146bcb7cac7ed27e5be12408b65ec2ca548ebf1ee2eb453b4ec" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="5de93a926141e2de920d7bb7bcaffaafedcf202ed564968ef8af4c5dda0dec3f" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="b7399a2d349c3cc1feabd806430e5690c873fb37cdee653f159ec3a2c8d1e382" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="e561f562d264ed8ed309ca7fa08a1393393c476e2fa3716c1b5b9ae340beffed" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="9abea16cdc8d4452e40ac5de9f51ca19c54f075eac25248bf60ea4e3a276f09d" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="b20859a7b483e15c0f526d86fee2ca28225b7e07b522256418877e33196258c5" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="53dec2f2b3ad9accf8b29bae7728ed23d03ac8df8c0c4e0e64022ebe7dc4eb57" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="f7f0edd863076e3744b68a438364f483421d9cefa3977897f2fdb049c785a058" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="71fad73b1babfb8bd950756931cc1aa712e93e33410eee4e045b52f5d40d274b" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="a7cf48900d9d0db8762b98b0c573f468383e6d31ef1f9f630403d7854fe0f339" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="e24e3e507292f235d5fe49083bd8ca4e3f2000751dd6f3175612bdd7f89f2b16" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="b01b96e383adcfedffe8fa8bfb7ecf9315eef77715fdcb71cba90a17546b238b" name="grub2-tools-efi" arch="x86_64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="f5eebb9dba328a1ff4e6c394aa858d19d2a048de00ef6bab714d1084aa6c2d14" name="grub2-tools-efi" arch="x86_64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="419c14710826ba1827c902a8293e38e8fd6199c84296a27c73ad4c726bc5c92d" name="grub2-tools-efi" arch="x86_64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="2047ad11cdf771a6ea15d2da27eacb2fee4d4b396a21ef341289b38da086bee6" name="grub2-tools-efi" arch="x86_64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="aad6dcf3582d4a31b690bb5f2101c1a3f1fcd140e134f988daade6cb1f2ec56b" name="grub2-tools-efi" arch="x86_64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="0d82e81a18e57b721ee8d521c91dc56af332b3cbc1f60400c79aa061e910afcd" name="grub2-tools-efi" arch="x86_64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="84c9e69c3926155f3ed1840e498eea45ee67dc768fcf74a6dd24102fbe44e201" name="grub2-tools-efi" arch="x86_64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="67c2ea23f8528070cff8910358cf6b5c8531e09842d0cbccd08fa01dac0e4ae0" name="grub2-tools-efi" arch="x86_64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="10b47f8e5945f4c41817a5825b91901633bdc25138a64254fd4ac755d32a5cbd" name="grub2-tools-efi" arch="x86_64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="754d5346069bfee51d7ee25c323f5746598bf0369c0747facca8ed1cba41aa63" name="grub2-tools-efi" arch="x86_64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="17bd7f1eec07e92d614856641c1f895e07cda5f2349add03574bb40181015825" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="087dc383a3553a45da5c8a97c095f7e1e8e8281896f2b71fb38fa07c35a15beb" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="4c6eb65b45a412d95f126637eb08c7dd4e3bd065491b39e5195ad6d4ed039f0f" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="1d1e2a86412e9a6ddf70ff3b533699761ac3979924cd662fb8076f2311e80fc8" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="3be369b7b001c8f8b532012a2b29bd3c8c1300e24124efd812ef5c428ee893c2" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="f6d3b6fed1caf84b780a85795261a4cd519f242a264bee00b559016e7cbe1388" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="72440da5512b6ec445283a8cbb56357492428a0f4ba23ca567ad4066bcfb3398" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="cf746195af5f1fcea24dfbd48dde7e4a1a5605002ab9fcf7e1544f563fc3ea8e" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="8b72e425c320e0b9cffb890b7b625d4f9332fdb056fa4fcedeffd40153086c27" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="1420917b8f2bf7c51f16738a62f4e9c39d1399aad4ce7147dfc367e3ad22e2e7" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="f9a9387b8f6f9257ebe4be754cda6e73aa29eb96249c8e23be1a9dcfddefd0a4" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="5a6c02f901b3584b338e0091889f66276a26d1e758a3b4693523d3101eed5761" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="9c3d84ef759a8d6277c7e4b508c5cafb1e1179c62850dbc8369249ce96e6968e" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="efdcf7a2fc89d9b06877532661776edb76497e0a77fd21c7d4c4eefc41e43163" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="d94dc03b17bdce952d01039238d1c5897f4d16475a9aa9baf315ddaec3733aa6" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="b79a5f907ac7ccdc39e6dfdabc7918efce25caae0c4b5e2b12922a08376b4fe6" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="24f9e0a736392f6c3962ef914fa869ec6281d5cb52e319ed95b808a8c8110c05" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="d07babcc52e77f00cb087238b9f2ab38fb2f0427c03177d67dedaab711814ca3" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="db99c4b6505a770c8a1c8036558a74f7622ea4e4dcd0020a1d232f76a84312db" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="e5019ae338e61966fc1b2b51611bdeb662b9b7d2350dc5a1c4de7eadbde72bfb" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="f3f22cecc36b5bc32b3271ab8abda0ac86c6044c8ce10a5811901e948d3d0b5c" name="gssntlmssp" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="10.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 0.7.0-9" date="1669032000">- DESC:Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.7.0-10" date="1676980800">- Fix CVE-2023-25563,CVE-2023-25564,CVE-2023-25565 and CVE-2023-25567</changelog>
</package>
<package pkgid="a21d15973d7e2efa5dde9b55b2e1bc146ebb95f1576e04999c8da6ed63bed755" name="gssntlmssp-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="10.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 0.7.0-9" date="1669032000">- DESC:Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.7.0-10" date="1676980800">- Fix CVE-2023-25563,CVE-2023-25564,CVE-2023-25565 and CVE-2023-25567</changelog>
</package>
<package pkgid="7d998b35ba648a566f665d0a545a68fe608c28233dcdf74fbb3a833d006c332a" name="gssntlmssp-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="10.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 0.7.0-9" date="1669032000">- DESC:Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.7.0-10" date="1676980800">- Fix CVE-2023-25563,CVE-2023-25564,CVE-2023-25565 and CVE-2023-25567</changelog>
</package>
<package pkgid="f120bd493cce3db143558f2e65ad7955a93ddb8e7b2fc0efeb2a7fc414a18426" name="gssntlmssp-devel" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="10.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 0.7.0-9" date="1669032000">- DESC:Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.7.0-10" date="1676980800">- Fix CVE-2023-25563,CVE-2023-25564,CVE-2023-25565 and CVE-2023-25567</changelog>
</package>
<package pkgid="0f26c5857dad71d01800eaf53f910b7aee27f79998aa344d2c3816c8711dc891" name="gssntlmssp-help" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="10.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 0.7.0-9" date="1669032000">- DESC:Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.7.0-10" date="1676980800">- Fix CVE-2023-25563,CVE-2023-25564,CVE-2023-25565 and CVE-2023-25567</changelog>
</package>
<package pkgid="d4228d1956c9363e077d06d522b74b95d209ea97c59dd9b44fa12ae9c24a73f9" name="gssproxy" arch="x86_64">
  <version epoch="0" ver="0.9.1" rel="2.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-1" date="1638273600">- update to 0.8.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
</package>
<package pkgid="b44bd8c5ac3b6ab059936d48db9a90a6c39fa47eec2942100c4f373777e4b363" name="gssproxy" arch="x86_64">
  <version epoch="0" ver="0.9.1" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-3" date="1711540800">- backport upstream patch to remove node from correct list</changelog>
</package>
<package pkgid="dc75283d35c6526cd3d0fc7ba1bc4130cbd009e63f6c4aaa5c8e03f8259b864c" name="gssproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.1" rel="2.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-1" date="1638273600">- update to 0.8.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
</package>
<package pkgid="547509d1058373e05c86fecaab1aacd0915ad9db23209982887e32b4108ac981" name="gssproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.1" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-3" date="1711540800">- backport upstream patch to remove node from correct list</changelog>
</package>
<package pkgid="b82d8f9d3c2f269bbca083d91846f51c97edb318445c8df597ee469ec3e64fec" name="gssproxy-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.1" rel="2.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-1" date="1638273600">- update to 0.8.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
</package>
<package pkgid="a9b2e4d871ec8cd5de87dac458d8d164ee618d521295092d89e6816588c34b02" name="gssproxy-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.1" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-3" date="1711540800">- backport upstream patch to remove node from correct list</changelog>
</package>
<package pkgid="0851355f2d3f884e19deef2d6261d8c905f7cbba00ea225acdc72674b06e5768" name="gssproxy-help" arch="x86_64">
  <version epoch="0" ver="0.9.1" rel="2.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-1" date="1638273600">- update to 0.8.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
</package>
<package pkgid="c45864ae55163b9dd0df47449b5b4665767035b728404de3580bbf1df975c1c3" name="gssproxy-help" arch="x86_64">
  <version epoch="0" ver="0.9.1" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-3" date="1711540800">- backport upstream patch to remove node from correct list</changelog>
</package>
<package pkgid="be60d3e27bd0363ff2c017607d2b4ef47c166e0211ffd29f0acf28a242d9ec0a" name="gstreamer1-plugins-bad-free" arch="x86_64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-6" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
</package>
<package pkgid="f338ebd5de858e73c7293403a1587473cb3eb8677be96ab8d03614f99fbdf256" name="gstreamer1-plugins-bad-free" arch="x86_64">
  <version epoch="0" ver="1.16.2" rel="9.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="houyingchao &lt;houiyngchao@h-partners.com&gt; - 1.16.2-6" date="1655208000">- Fix compilation failed</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 1.16.2-8" date="1702123200">- modify compilation failed about libgstwaylandsink.so</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-9" date="1702641600">- Fix CVE-2023-44446,CVE-2023-37329</changelog>
</package>
<package pkgid="db843030495e8c0b298b56267d0fb385f0c9a9ccd747705fe753c0d72202de36" name="gstreamer1-plugins-bad-free-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-6" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
</package>
<package pkgid="8f53f09c8fb21a392e4ff02a0a787bbff91a0e92e82ba0b31388eb6b80c31b91" name="gstreamer1-plugins-bad-free-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.2" rel="9.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="houyingchao &lt;houiyngchao@h-partners.com&gt; - 1.16.2-6" date="1655208000">- Fix compilation failed</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 1.16.2-8" date="1702123200">- modify compilation failed about libgstwaylandsink.so</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-9" date="1702641600">- Fix CVE-2023-44446,CVE-2023-37329</changelog>
</package>
<package pkgid="d8be3ed6f06f209f404d2e7e0f7d055253820ab1f6b6c8e89c6eb8bda185be65" name="gstreamer1-plugins-bad-free-debugsource" arch="x86_64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-6" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
</package>
<package pkgid="da8715bad9542546222e3ef948b2c31cc2d7524d8a556808ec8659c17495594a" name="gstreamer1-plugins-bad-free-debugsource" arch="x86_64">
  <version epoch="0" ver="1.16.2" rel="9.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="houyingchao &lt;houiyngchao@h-partners.com&gt; - 1.16.2-6" date="1655208000">- Fix compilation failed</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 1.16.2-8" date="1702123200">- modify compilation failed about libgstwaylandsink.so</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-9" date="1702641600">- Fix CVE-2023-44446,CVE-2023-37329</changelog>
</package>
<package pkgid="a277274c1990502b7188c79ca3e5cea1c5c60c6cd6441d1bfb3b9c38031e553b" name="gstreamer1-plugins-bad-free-devel" arch="x86_64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-6" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
</package>
<package pkgid="a57edb9343424ef0ed0b1f0d5e7bbb6ac3150aaf123d2fb363521b26a7977535" name="gstreamer1-plugins-bad-free-devel" arch="x86_64">
  <version epoch="0" ver="1.16.2" rel="9.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="houyingchao &lt;houiyngchao@h-partners.com&gt; - 1.16.2-6" date="1655208000">- Fix compilation failed</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 1.16.2-8" date="1702123200">- modify compilation failed about libgstwaylandsink.so</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-9" date="1702641600">- Fix CVE-2023-44446,CVE-2023-37329</changelog>
</package>
<package pkgid="1534d86dc7c16996ecc1c68230534de0cdca117ce2cde449095ad7c623a3d100" name="gstreamer1-plugins-base" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
</package>
<package pkgid="9e0c89aa7d8b25dec117622430f0d8d0f85efc75acfa7cf83fb0f401edae1fee" name="gstreamer1-plugins-base" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="6.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
</package>
<package pkgid="83f9146f52c6c328ef27dbf768ec9504213410e637d09d1959755536d0cf07ba" name="gstreamer1-plugins-base" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="7.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
</package>
<package pkgid="57ec97e7468f6874036128ae784708580e3396876aac52a7a2dbee1a9b14b100" name="gstreamer1-plugins-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
</package>
<package pkgid="d092b197a8446405c5eb56ac889bc90364eb8d6e20461c03ee6956857be4a258" name="gstreamer1-plugins-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="6.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
</package>
<package pkgid="ddb6d475a4643fa87ed7d72b633e9d8e38a6f6906c6ceb5695fdb751e99ca767" name="gstreamer1-plugins-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="7.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
</package>
<package pkgid="cacbc14a850cfddb6b0b22c47cf4699ef20aa35d3fcdaf0133c48570bed6f680" name="gstreamer1-plugins-base-debugsource" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
</package>
<package pkgid="3198fd2723817272fe8037ff7b14f7d399f6be86323b08baa38791da3981d37d" name="gstreamer1-plugins-base-debugsource" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="6.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
</package>
<package pkgid="083570583f0a59d6e5f7a1babbf6841ab189982b73ed61d172a47cc0071aa344" name="gstreamer1-plugins-base-debugsource" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="7.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
</package>
<package pkgid="f54b24df39318402eb2f93fb0807c0abd0ca3f1a3a64e5f6cf0e1b0ad0208c55" name="gstreamer1-plugins-base-devel" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
</package>
<package pkgid="ece08aae85b2d8d751c4d256ae3bd34cbc1be82f88ed80d905b7071b94c79394" name="gstreamer1-plugins-base-devel" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="6.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
</package>
<package pkgid="feba39ed05c193fae51ec0d579637a24081f70b891e5bb02c7b85fe5e3b8daaa" name="gstreamer1-plugins-base-devel" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="7.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
</package>
<package pkgid="9e0b7f49c6ff39a6c3ff49c1d22ede52b81839ddccf50905c7b3dff99465662b" name="gstreamer1-plugins-base-help" arch="noarch">
  <version epoch="0" ver="1.18.4" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
</package>
<package pkgid="49ee81a5945d9588af67e59d06b97959cb5651a1984676863f0af25e382092b5" name="gstreamer1-plugins-base-help" arch="noarch">
  <version epoch="0" ver="1.18.4" rel="6.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
</package>
<package pkgid="e75a4b38c759cb010357d6698aa512dacc2cc5518d6c1eb19307e00e0c9b92f8" name="gstreamer1-plugins-base-help" arch="noarch">
  <version epoch="0" ver="1.18.4" rel="7.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
</package>
<package pkgid="22504cac52c3591b2604f2943d765ddbd49b30bcb760fa1eb02b31fd4242f092" name="gstreamer1-plugins-good" arch="x86_64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.16.2-5" date="1656331200">- Fix CVE-2022-2122 CVE-2022-1920-to-CVE-2022-1925</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
</package>
<package pkgid="2657b42e498f969cb4ceac0d9db8ecf5ab9dd234b42a7b1ea913d27f7b50eab8" name="gstreamer1-plugins-good-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.16.2-5" date="1656331200">- Fix CVE-2022-2122 CVE-2022-1920-to-CVE-2022-1925</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
</package>
<package pkgid="6e65c707d8a7ca5af11a4083cde24bd96cee5031c2d5a0a42e9b874473ee92ff" name="gstreamer1-plugins-good-debugsource" arch="x86_64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.16.2-5" date="1656331200">- Fix CVE-2022-2122 CVE-2022-1920-to-CVE-2022-1925</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
</package>
<package pkgid="8af9b0b30f69527106c3f42135b78f22b76270aa03d21fe37c57f1dfeaff2caf" name="gstreamer1-plugins-good-gtk" arch="x86_64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.16.2-5" date="1656331200">- Fix CVE-2022-2122 CVE-2022-1920-to-CVE-2022-1925</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
</package>
<package pkgid="82f2132bb242abc594e1517bf12537197df1bd4489beb9432940d7c2572eb8f0" name="gstreamer1-plugins-good-help" arch="noarch">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.16.2-5" date="1656331200">- Fix CVE-2022-2122 CVE-2022-1920-to-CVE-2022-1925</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
</package>
<package pkgid="24fa41f1ae6dd7bc3029d8f4be82686cb1dac3293d56114e0350c81778105df8" name="guava" arch="noarch">
  <version epoch="0" ver="25.0" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 25.0-6" date="1688472000">- Fix CVE-2023-2976</changelog>
</package>
<package pkgid="59cf9f5072368978b94a68d88fcf5529070e2ef88deeaf64d5f68f972a10e2bb" name="guava-help" arch="noarch">
  <version epoch="0" ver="25.0" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 25.0-6" date="1688472000">- Fix CVE-2023-2976</changelog>
</package>
<package pkgid="b33375c0578ef8f7b0b0ed7ab81a66f57d00ee0d4f921d7f6ad7c723f593700d" name="guava-testlib" arch="noarch">
  <version epoch="0" ver="25.0" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 25.0-6" date="1688472000">- Fix CVE-2023-2976</changelog>
</package>
<package pkgid="408e53782693a5d180e57d7d099b1c7b3da7fd0b05c5f519c9d91f01c5d29ee1" name="guava20" arch="noarch">
  <version epoch="0" ver="20.0" rel="11.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20.0-11" date="1688472000">- Fix CVE-2023-2976</changelog>
</package>
<package pkgid="ea5c958c6915da3a016378132db001d2f66ab4cc1202c9bee3be4e48bad80158" name="guava20-help" arch="noarch">
  <version epoch="0" ver="20.0" rel="11.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20.0-11" date="1688472000">- Fix CVE-2023-2976</changelog>
</package>
<package pkgid="773f91817cdc700671eab2e8b75382b2e9e598457bec88620192fb08cb8a1fe8" name="haproxy" arch="x86_64">
  <version epoch="0" ver="2.6.6" rel="2.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
</package>
<package pkgid="8067e8caac49e2996629a3652ef9602a6ad9a878a1fc0feaa8480cbc1f57d72b" name="haproxy" arch="x86_64">
  <version epoch="0" ver="2.6.6" rel="3.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
</package>
<package pkgid="917b7a9d7f2292507f7b0a7b8274cb57510e7c31d37b88b62155f0cdadbf4011" name="haproxy" arch="x86_64">
  <version epoch="0" ver="2.6.6" rel="4.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
</package>
<package pkgid="33a5e85f0ed27647b718e8135dd735852035ff1389b2e785e577b920af5df466" name="haproxy" arch="x86_64">
  <version epoch="0" ver="2.6.6" rel="8.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
</package>
<package pkgid="7b7eaf434c80a39437ffcddeb58181cae6283a178dfa3de14b0a66a7998d8aa1" name="haproxy" arch="x86_64">
  <version epoch="0" ver="2.6.6" rel="9.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
</package>
<package pkgid="f026036dd355f2f6019c7f5c107558821cee4a56d8f9c2ad54a9ffc86e27c794" name="haproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.6" rel="2.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
</package>
<package pkgid="7e977b3cd4ac426ba73e0ef8d7359ec3a5fb00cef2092b4452fb07bc5ec1d1c0" name="haproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.6" rel="3.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
</package>
<package pkgid="00a22a12b2f728c0a413aaff614e4fc7561cceaabe09ac553f96ea35b1825c88" name="haproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.6" rel="4.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
</package>
<package pkgid="8b108be2d314a4283bd8cceb6a278e9c6033ea099de89eddb036240335bfb072" name="haproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.6" rel="8.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
</package>
<package pkgid="91af61d16c4025eca7999faf09874af25aa3c779be75b34acb5b617a012471cd" name="haproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.6" rel="9.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
</package>
<package pkgid="dda6adaec26e93f2fdc5efd883503a584b6e97176dbfb3f395c44012e86bf478" name="haproxy-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.6" rel="2.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
</package>
<package pkgid="dc7f3c28ed4b49522b42b1c7cea834eda18dd124def0987787c57809df52c38d" name="haproxy-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.6" rel="3.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
</package>
<package pkgid="269108954a7672a6546ab81a7532aeae6009dcadbb32a0c0f1e64cf2b6c4f4b2" name="haproxy-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.6" rel="4.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
</package>
<package pkgid="5c184a76dd61743f31eb719e31478e1dbfde957c8edac280cf42905dfe72e3a0" name="haproxy-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.6" rel="8.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
</package>
<package pkgid="40fa13a11d3bf87df5202b1a5380fb15012e43836cdabcbd4aa839781e61645f" name="haproxy-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.6" rel="9.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
</package>
<package pkgid="e29b86758f25ac610ab5a6ba015b50f5714c3eedd505a4a72e0330c9681da291" name="haproxy-help" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="2.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
</package>
<package pkgid="0277b4491a69cabfcb963bacc7b0514a5a413e62fd5b0ad00eaf8c437c96a607" name="haproxy-help" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="3.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
</package>
<package pkgid="c6dde930869bbca54b372333fdbc8b9a69c0c72914b7fb26c34136125a31aae3" name="haproxy-help" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="4.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
</package>
<package pkgid="9339c92e239226630bd6b620568d38fb8c5461555bbf87eb50c343c2cc55f6fe" name="haproxy-help" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="8.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
</package>
<package pkgid="92a8b641b1f2b908a77c653cb8ab38c7417340c1a29ddef2eaa305f094388261" name="haproxy-help" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="9.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
</package>
<package pkgid="633d7e1bcf062cbfafe89c6786dd331d3760bd8da11fca1cc426771677eddae1" name="harfbuzz" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-1" date="1624622400">- update to 2.8.1</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-2" date="1625486400">- enable make check</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.8.2-1" date="1638532800">- update to harfbuzz-2.8.2-1</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.8.2-2" date="1653393600">- fix spec changelog date</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-3" date="1657800000">- fix CVE-2022-33068</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-4" date="1676462400">- fix CVE-2023-25193</changelog>
</package>
<package pkgid="ec1846b7dd4c51b88536e981c8879e01a524d1767af7f1ca02a321af1a804dbc" name="harfbuzz-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-1" date="1624622400">- update to 2.8.1</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-2" date="1625486400">- enable make check</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.8.2-1" date="1638532800">- update to harfbuzz-2.8.2-1</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.8.2-2" date="1653393600">- fix spec changelog date</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-3" date="1657800000">- fix CVE-2022-33068</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-4" date="1676462400">- fix CVE-2023-25193</changelog>
</package>
<package pkgid="07bedb73a0cb399e814cd3813f53631cdc563c863f9666acf197f9d3c51620bc" name="harfbuzz-debugsource" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-1" date="1624622400">- update to 2.8.1</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-2" date="1625486400">- enable make check</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.8.2-1" date="1638532800">- update to harfbuzz-2.8.2-1</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.8.2-2" date="1653393600">- fix spec changelog date</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-3" date="1657800000">- fix CVE-2022-33068</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-4" date="1676462400">- fix CVE-2023-25193</changelog>
</package>
<package pkgid="ca5fc53dd9785fa1e187c73861a69693393c8362b2850a360c0d225cbf01aafa" name="harfbuzz-devel" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-1" date="1624622400">- update to 2.8.1</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-2" date="1625486400">- enable make check</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.8.2-1" date="1638532800">- update to harfbuzz-2.8.2-1</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.8.2-2" date="1653393600">- fix spec changelog date</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-3" date="1657800000">- fix CVE-2022-33068</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-4" date="1676462400">- fix CVE-2023-25193</changelog>
</package>
<package pkgid="0745dad026427f46e0f79409527eeba075d0f5baf02d8031ed0df4631eb502d2" name="harfbuzz-help" arch="noarch">
  <version epoch="0" ver="2.8.2" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-1" date="1624622400">- update to 2.8.1</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-2" date="1625486400">- enable make check</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.8.2-1" date="1638532800">- update to harfbuzz-2.8.2-1</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.8.2-2" date="1653393600">- fix spec changelog date</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-3" date="1657800000">- fix CVE-2022-33068</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-4" date="1676462400">- fix CVE-2023-25193</changelog>
</package>
<package pkgid="f196cb7dd89c385df024097dae670da2c1bfe66447dba26c562fb82141b1dfc1" name="hdf5" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="2ed860ac4acfd40fc9e0a3dcf015317fdeaf94dec7857b4c11fe1bd4d6105b8d" name="hdf5" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="8a030ffe46d72b3071de75b14b5719bf616e2c96d11b903a54df554140708486" name="hdf5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="6b08fa0242d119dbd8e260cbd1f154307efe1227e2ee839b1cd25a45b9745948" name="hdf5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="076e8c5ced9d072bbace4f920420740ccf1a8c68e123bd48369578478521e687" name="hdf5-debugsource" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="c631af8f18aaf85a47808f125c7873687c04d7a85dc4dd3c724b9f253acd31e7" name="hdf5-debugsource" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="f5237994be79c31e1f57d5b529873d61ffada15f13154db6acf4ab659bfe0458" name="hdf5-devel" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="684745f131c5955d915aab535ed4e20a8ba454a17960d6df9dee543f66b2ea8a" name="hdf5-devel" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="bef03b2f51098fe3b477e07ad122d59932fc1de809b6f6fc9406751a27401457" name="hdf5-mpich" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="0a50e577a096678fe4c606189074cfeefc7ab86a7eccf39d92dd5d9b211a05f3" name="hdf5-mpich" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="0d12f67bbd2b836bcf957226701c88434629935c131eb88c1e9658d754a85b11" name="hdf5-mpich-devel" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="29c078b872786fb4789df75d5e659294477dba0324cf6ed76c27d16b01eaa1cc" name="hdf5-mpich-devel" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="34e5c4c3f8d617f3436da64a258dd17beeea0985dc7a1a02869c5731440fa231" name="hdf5-mpich-static" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="210a01983422d4830f4d11e6094aa4b48574666a8e9699c4c9ffb0c56a3558e2" name="hdf5-mpich-static" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="b2979a01f9e72b4945be6c513e8bef761d69ea18b7d6265896eeb35a609163d3" name="hdf5-openmpi" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="f9df23414c8e03a0d816c8c3c4523743dc2cdb8ea99ef55489c866537be3ebad" name="hdf5-openmpi" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="5fafdbac33fa7e0784c600ffd4c4d13426b7d782f01d566ce877afd0edf9c266" name="hdf5-openmpi-devel" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="d097cfd6aa771456439f0b98cf668b6f365ae7f573104f7df156c5ab8d23d308" name="hdf5-openmpi-devel" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="45841e3249a74be8a9dc619d4078407dee5a7e5068cf6414dbd77091d04080c9" name="hdf5-openmpi-static" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="42dcfebe1ac22efe4f310ef239c9765db4793e2c6a862a5b8e2966f5cbdca3d5" name="hdf5-openmpi-static" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="f04d418dd6bd4d323799e7d628a83b2d5a0cf337c5a9af948d7da1defc3c577d" name="hsqldb" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:2.4.0-4" date="1669204800">- Modify invalid Source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.4.0-5" date="1701950400">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="ba201a214b8e081472b2f1b936e15820b6b9b72054c2e0e9045fe9f6689fe9bc" name="hsqldb-demo" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:2.4.0-4" date="1669204800">- Modify invalid Source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.4.0-5" date="1701950400">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="0b4a6642f81d73bb96abaf4ca4214e6dcac5f695cd0f615eb67481972eff6d0b" name="hsqldb-javadoc" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:2.4.0-4" date="1669204800">- Modify invalid Source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.4.0-5" date="1701950400">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="00fba6d502acdf9f4bb1f41bb0e89284ee586b3b4e75136711f09574268b82af" name="hsqldb-lib" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:2.4.0-4" date="1669204800">- Modify invalid Source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.4.0-5" date="1701950400">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="a639cd8cb8172afb57be38a0017a6dfd93d7a80886ecefdefef143a5d6c2bcca" name="hsqldb-manual" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:2.4.0-4" date="1669204800">- Modify invalid Source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.4.0-5" date="1701950400">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="48e52abbf5cb80a935a2eb544cb57e00ec962216e231d41aa71df9970c8dfba7" name="hsqldb1" arch="noarch">
  <version epoch="0" ver="1.8.1.3" rel="3.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.8.1.3-2" date="1652097600">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.8.1.3-3" date="1702468800">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="7e59cca942ad6dd85a8c1493ed57cc6af86e43af163ffeb45d2a314f5a03d606" name="hsqldb1-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.1.3" rel="3.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.8.1.3-2" date="1652097600">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.8.1.3-3" date="1702468800">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="a7d53863025d00ce38a0ba38a546f54a5ea6cea3cb204bac05700b0af175bd3a" name="htop" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 3.1.2-1" date="1642593600">- Upgrade to version 3.1.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 3.1.2-2" date="1701172800">- Backport upstream patches to fix htop crash in container</changelog>
</package>
<package pkgid="cf4f55d58e131be80c927ea60c58ea8ad1d335bf39b9f2231af6ce8b4b64ff47" name="htop-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 3.1.2-1" date="1642593600">- Upgrade to version 3.1.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 3.1.2-2" date="1701172800">- Backport upstream patches to fix htop crash in container</changelog>
</package>
<package pkgid="84c20e882ec8b303c424d05570386e611e819c315c511d89b68bd48fb3c24aff" name="htop-debugsource" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 3.1.2-1" date="1642593600">- Upgrade to version 3.1.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 3.1.2-2" date="1701172800">- Backport upstream patches to fix htop crash in container</changelog>
</package>
<package pkgid="5d896cc915929e661811a519feee1cb042d2ce618139bf05c1beae177c5fc0e4" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="74414a4a341ab18c9a35b85cb5c92c12fb1d28b8269d12f5390ff1dae9337db1" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="20d80d73fa81744ac3c3147fb583db7f6a44c5954adde1c100aad8a409e31097" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="b07c4ccb837803e9e380fdfe51b4c990067e97c9f7401ecc1056825cdab0a763" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="878cf5731082a66077e9877f0f09933194f20fbf563d7b1b698046195cfbfaec" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="08ae7db30a4ba32b5687341f0096956ed90f63927cd4e339e09a1e4f58c2219f" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="0f56e8d2dbefae744a5a5ef49e1843942ff7c45e8f360b8415e07ff83281841c" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="f5bc7d41ad4c98e997e7b0d41ad6cebff4aa3e387d8e63ec2418a7f809d153bc" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="545c213879457e841bb7d8156b85dc455b9a61245b35539e6fb5e867723351d7" name="httpd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="7d8c21619087bd752e5fd05c986e349e2977ba8a4a1fcda71491c3e181d37013" name="httpd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="64b40988f694f2d184daccf89cf6bd4572a928f0905e634653cb08adff535a6c" name="httpd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="e8b976cde779a47acf6dea2854128f98205bb157df3485b290d2a1bb38e159d0" name="httpd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="8118bfb9f06b2189651ab749a2a728ee2fd143df644cec99669e360e6d2a133a" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="7bbd47ebb5ba5e2c8af315a84c1175cae08d1dbca320c65b24840a1620e3fdc1" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="5d58e113412b715996730620b18a8654e341f07176bb94d72e504133197bd146" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="31ad72fc5536a70cd09839e681ae8648cef5d1887ebb2b776628faad4c6e6d0c" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="f2028ab8e32de636c871490a8356a6a6565f31971c4cc7342c893f2ccea50156" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="a6367a638b4e869d273d3293d66c4aeecf05a44ab963a892c484ba40f73ba2be" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="66a997e7ca2ab0bcd132f4d5c6f57657c0262c5e9e890ed663dc623f79db8661" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="6addeddf39f611ae878ffa80edb0dc263bfe1fa47e018fb88f851bb1dfee7fff" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="0e6a50ca94a87c045cc24d34c55db03eadc8cc7df5011b45ca6cdeba4f28be0a" name="httpd-help" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="c8f6b4f7d26286a74829bb83bdf7264f0d93ca221f7727fc5a3a18c6a2bb3bf6" name="httpd-help" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="f5c9368be5f44c9ab65f331b99f68f3600de27debdaaad4504ad3c9d39b634e4" name="httpd-help" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="8f60a20a4634a307e1f1ec378080210f185c480fff3665e466cf40850c4924fa" name="httpd-help" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="4cd7b2d89607ece0f3e3394c953874fc22cf386329ad8a8ee19f003e03f85bd3" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="5ee3f6c6b19622056af94c3c3b314ce99aed2751f577df0fe37cb450d965934e" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="4e56b1427ad281229c07be6cc9210a3bdf1c4a7835df2617ef83a99ddc39afaf" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="f4df0840cc73c94023c4c333030c9eea5842e1fe4d08b4358bd38f377dc8ce82" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="4a5a4402030e0ef6ca41a0518d44109ad0159fd635efc1791b84607bd685c1be" name="hwloc" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.11.9-5" date="1652097600">- License compliance rectification</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.7.1-1" date="1666094400">- Update to 2.7.1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.1-2" date="1693396800">- Fix CVE-2022-47022</changelog>
</package>
<package pkgid="2a7d1d5c2dc1d9f6b24b9d887fa72b0e7f8633c0d5d5d1967f10d7e14458c6da" name="hwloc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.11.9-5" date="1652097600">- License compliance rectification</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.7.1-1" date="1666094400">- Update to 2.7.1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.1-2" date="1693396800">- Fix CVE-2022-47022</changelog>
</package>
<package pkgid="dec999c5d9029d25272362c4c354693beeacae25b5d8e24fe763cbda2e5ff96c" name="hwloc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.11.9-5" date="1652097600">- License compliance rectification</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.7.1-1" date="1666094400">- Update to 2.7.1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.1-2" date="1693396800">- Fix CVE-2022-47022</changelog>
</package>
<package pkgid="abecd54c4ae4321df310145baba6d92f5ad03e8f1e28fc10f625b003f133e8c9" name="hwloc-devel" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.11.9-5" date="1652097600">- License compliance rectification</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.7.1-1" date="1666094400">- Update to 2.7.1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.1-2" date="1693396800">- Fix CVE-2022-47022</changelog>
</package>
<package pkgid="128bad42b10b981675e6d994a76133654f35c45622cf0ca0379e6f714cd59cf1" name="hwloc-help" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.11.9-5" date="1652097600">- License compliance rectification</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.7.1-1" date="1666094400">- Update to 2.7.1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.1-2" date="1693396800">- Fix CVE-2022-47022</changelog>
</package>
<package pkgid="523e1b341757f2ce9edd23bf9b4f787214e113d21c5074f5e11916a905966618" name="hyperscan" arch="x86_64">
  <version epoch="0" ver="5.4.0" rel="3.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 5.2.1-3" date="1627128000">- Fix build error on X86</changelog>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 5.2.1-4" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
</package>
<package pkgid="76cd3d5499d6e318475159039173389a4d38d91bda42892f219bb331a4cca736" name="hyperscan" arch="x86_64">
  <version epoch="0" ver="5.4.2" rel="1.oe2203sp1"/>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.2-1" date="1693569600">- Update to 5.4.2 for fix CVE-2023-28711</changelog>
</package>
<package pkgid="0107313b5330132bc3e956615846e4c5bb7a1d4b69b1de53553bc09a9946b0e2" name="hyperscan-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.4.0" rel="3.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 5.2.1-3" date="1627128000">- Fix build error on X86</changelog>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 5.2.1-4" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
</package>
<package pkgid="1a76ae1fa91c6a538d227b5d0c8dc1a9d8c4e044a3571742266a38a7dfee3833" name="hyperscan-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.4.2" rel="1.oe2203sp1"/>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.2-1" date="1693569600">- Update to 5.4.2 for fix CVE-2023-28711</changelog>
</package>
<package pkgid="7b2b2125785265841ef071a2ab120e76f20368e26aea997077307429415040a2" name="hyperscan-debugsource" arch="x86_64">
  <version epoch="0" ver="5.4.0" rel="3.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 5.2.1-3" date="1627128000">- Fix build error on X86</changelog>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 5.2.1-4" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
</package>
<package pkgid="7ce1a09e57e60193248217b75908b7795a640ff234641755568852875b240b30" name="hyperscan-debugsource" arch="x86_64">
  <version epoch="0" ver="5.4.2" rel="1.oe2203sp1"/>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.2-1" date="1693569600">- Update to 5.4.2 for fix CVE-2023-28711</changelog>
</package>
<package pkgid="789259114ab931c5f9fb8c9abd2018dab354912b1d3e54566dac7e6ae4592498" name="hyperscan-devel" arch="x86_64">
  <version epoch="0" ver="5.4.0" rel="3.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 5.2.1-3" date="1627128000">- Fix build error on X86</changelog>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 5.2.1-4" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
</package>
<package pkgid="e45014a74a45b503e177d5279aa6a4c65cdecde09b9147660020101975a57472" name="hyperscan-devel" arch="x86_64">
  <version epoch="0" ver="5.4.2" rel="1.oe2203sp1"/>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.2-1" date="1693569600">- Update to 5.4.2 for fix CVE-2023-28711</changelog>
</package>
<package pkgid="c640183526b443a176a16ee26ccaa9c0088596f50079f14c78fd96e5d6103430" name="iSulad" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="1.oe2203sp1"/>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.17-6" date="1667390400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix cleanup module memory leak</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-7" date="1668600000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update tar package from source</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-8" date="1669032000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix cannot install isulad and unknown option</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-9" date="1669377600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: add primary group to additional groups</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.17-10" date="1669636800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: remove chmod 751 permission for dirs by engine when user-remap enabled</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-11" date="1670328000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-12" date="1671192000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-13" date="1671451200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-14" date="1671710400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: remove clean_module_fill_ctx for libisulad_img.so</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-1" date="1672747200">- Type: update
- ID: NA
- SUG: NA
- DESC: update to v2.0.18</changelog>
</package>
<package pkgid="26a40e5e428e726b0b0a4a6f1aa0369bfacc56fd309a4ed0eb0542ddc87e76ae" name="iSulad" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="13.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-4" date="1678363200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-5" date="1682337600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for runc and cri</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-6" date="1683201600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="73d37b4e20ea60affbfdddc9de9a38f70eb6f3eef7daf44d56fb7bf3f2a17994" name="iSulad" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="14.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-5" date="1682337600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for runc and cri</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-6" date="1683201600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="a5bf1a66553c1b88ab82d851b4db5d09278fae801ed4e1c15a2e40c676daa25c" name="iSulad" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="16.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="105ff9894d8b894c29fd6aa1809634662ec9ec3e58229f53cfc31a47664bce32" name="iSulad" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="17.oe2203sp1"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="fee0e01b942c6f148735df767cd4cdc332fb8bb2b080d7f693801210ed952709" name="iSulad" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="18.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-18" date="1718107200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for env/cri/fork</changelog>
</package>
<package pkgid="f29cc8fb96db43a1d76522e8c4dea1149f0ac90cc5a2b36398348e54632001fd" name="iSulad-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="1.oe2203sp1"/>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.17-6" date="1667390400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix cleanup module memory leak</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-7" date="1668600000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update tar package from source</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-8" date="1669032000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix cannot install isulad and unknown option</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-9" date="1669377600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: add primary group to additional groups</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.17-10" date="1669636800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: remove chmod 751 permission for dirs by engine when user-remap enabled</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-11" date="1670328000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-12" date="1671192000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-13" date="1671451200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-14" date="1671710400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: remove clean_module_fill_ctx for libisulad_img.so</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-1" date="1672747200">- Type: update
- ID: NA
- SUG: NA
- DESC: update to v2.0.18</changelog>
</package>
<package pkgid="da733b5504932f0a8aa066427648442cbc53597e3223fb4d6fa300da0b46460f" name="iSulad-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="13.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-4" date="1678363200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-5" date="1682337600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for runc and cri</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-6" date="1683201600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="7e93ef3f11d873c3779b4e6dd4a73097db81c3491bb8f849db60d692d4fdf538" name="iSulad-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="14.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-5" date="1682337600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for runc and cri</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-6" date="1683201600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="a05ed081e5a89304cd094d5a45e2655ff45946b2e32082aae16e7896fe9fd625" name="iSulad-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="16.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="fbde73f75ce08c0c50eb36d6473a8c90d11df4f77bfa61ca9ea12b4a667b7174" name="iSulad-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="17.oe2203sp1"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="c0b52f92b15c1fc5f21bd93dad0e284eb812131bf7bbbb741f51b54c53811dad" name="iSulad-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="18.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-18" date="1718107200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for env/cri/fork</changelog>
</package>
<package pkgid="43d28e7c3eeb362676c1cec2e4f5a1394c6c4a42fd3ecc9f343dfd073c4fdcb5" name="iSulad-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="1.oe2203sp1"/>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.17-6" date="1667390400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix cleanup module memory leak</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-7" date="1668600000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update tar package from source</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-8" date="1669032000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix cannot install isulad and unknown option</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-9" date="1669377600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: add primary group to additional groups</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.17-10" date="1669636800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: remove chmod 751 permission for dirs by engine when user-remap enabled</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-11" date="1670328000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-12" date="1671192000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-13" date="1671451200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-14" date="1671710400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: remove clean_module_fill_ctx for libisulad_img.so</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-1" date="1672747200">- Type: update
- ID: NA
- SUG: NA
- DESC: update to v2.0.18</changelog>
</package>
<package pkgid="cebe59e5ab03eb0451794f17c635dc8a337f7302ebee6f4f80456f2650a745dc" name="iSulad-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="13.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-4" date="1678363200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-5" date="1682337600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for runc and cri</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-6" date="1683201600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="6199a1e0484e5e2b6aee31919b721a38a4f7c91bd1edf59e6ae7f429ea5b5d34" name="iSulad-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="14.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-5" date="1682337600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for runc and cri</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-6" date="1683201600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="c9911f416cf8140f8be8e701a5ea2ad96a96d71edbefff44726e9472b9c803de" name="iSulad-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="16.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="f6eb479d309dc2bb47cf87128adb65c77baac285eebdb2b673bd3c5f121bb4b2" name="iSulad-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="17.oe2203sp1"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="142451e001905bb27ff88cb232d929721285c04ecdc4ab4745a1d4de30e7ba6c" name="iSulad-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="18.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-18" date="1718107200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for env/cri/fork</changelog>
</package>
<package pkgid="298f4e08a6da02e5450eaa8f7066a8db967cf1507b96ecd3892089e4af27506d" name="ibus-typing-booster" arch="noarch">
  <version epoch="0" ver="2.16.0" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 2.16.0-1" date="1655812800">- Upgrade to version 2.16.0</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.16.0-2" date="1705320000">- Avoid verbatim bidi formatting characters in the source code</changelog>
</package>
<package pkgid="bab974cda0987cf49c92fe219a028846d5758adc0ec5b96b572b2c3e058d8362" name="ibus-typing-booster-help" arch="noarch">
  <version epoch="0" ver="2.16.0" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 2.16.0-1" date="1655812800">- Upgrade to version 2.16.0</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.16.0-2" date="1705320000">- Avoid verbatim bidi formatting characters in the source code</changelog>
</package>
<package pkgid="d1ad4fba9e713753dbb9826d582d8a9b5d0161acac897f205e888742cda1575d" name="icedax" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="51.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.1.11-46" date="1666699200">- rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.1.11-47" date="1667476800">- add sw64 patch</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-48" date="1668600000">- fix empty link</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-49" date="1669204800">- fix spell error</changelog>
  <changelog author="yueyuankun&lt;yueyuankun@kylinos.cn&gt; - 1.1.11-50" date="1698667200">- Type:update
- ID:NA
- SUG:NA
- DESC:delete Requires git</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 1.1.11-51" date="1704369600">- Type:bugfix
- ID:NA
- SUG:NA
- delete autosetup macro in changelog</changelog>
</package>
<package pkgid="636def2cbdcfbc28622dafb53cec2772b8fd32ac3ed480fa8b31781542478412" name="icu" arch="x86_64">
  <version epoch="0" ver="72.1" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 72.1-1" date="1668513600">- update to icu4c-72.1</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 72.1-2" date="1668772800">- add loongarch64 support</changelog>
  <changelog author="wuzx &lt;wuzx1226@qq.com&gt; - 72.1-3" date="1669032000">- Add sw64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-4" date="1669032001">- Optimize the patch for add loongarch64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-5" date="1671105600">- delete redundant files</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-6" date="1686657600">- delete taboo words</changelog>
</package>
<package pkgid="7cebd16c719a460ea29f9448ab9b2f755cdad8accf876714e093d21c1349ba19" name="icu-debuginfo" arch="x86_64">
  <version epoch="0" ver="72.1" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 72.1-1" date="1668513600">- update to icu4c-72.1</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 72.1-2" date="1668772800">- add loongarch64 support</changelog>
  <changelog author="wuzx &lt;wuzx1226@qq.com&gt; - 72.1-3" date="1669032000">- Add sw64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-4" date="1669032001">- Optimize the patch for add loongarch64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-5" date="1671105600">- delete redundant files</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-6" date="1686657600">- delete taboo words</changelog>
</package>
<package pkgid="0e6c333fb7907a9ba7fa06a4e5f458a74666adcd140ee7be0da1072876699f83" name="icu-debugsource" arch="x86_64">
  <version epoch="0" ver="72.1" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 72.1-1" date="1668513600">- update to icu4c-72.1</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 72.1-2" date="1668772800">- add loongarch64 support</changelog>
  <changelog author="wuzx &lt;wuzx1226@qq.com&gt; - 72.1-3" date="1669032000">- Add sw64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-4" date="1669032001">- Optimize the patch for add loongarch64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-5" date="1671105600">- delete redundant files</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-6" date="1686657600">- delete taboo words</changelog>
</package>
<package pkgid="0aad9de4343e11e48f870d7a020eda708aa99cbe7e88f0aa0f76d2bfbb55a031" name="icu-help" arch="noarch">
  <version epoch="0" ver="72.1" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 72.1-1" date="1668513600">- update to icu4c-72.1</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 72.1-2" date="1668772800">- add loongarch64 support</changelog>
  <changelog author="wuzx &lt;wuzx1226@qq.com&gt; - 72.1-3" date="1669032000">- Add sw64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-4" date="1669032001">- Optimize the patch for add loongarch64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-5" date="1671105600">- delete redundant files</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-6" date="1686657600">- delete taboo words</changelog>
</package>
<package pkgid="cb99d6a1b0b3ad0748f987c64477a2c6f7fd9ed52272f9fa81e9a795d0843bdb" name="indent" arch="x86_64">
  <version epoch="0" ver="2.2.11" rel="29.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
</package>
<package pkgid="75a76dfecada64ad08c62c2027bf8726fd4182b5fef9e74030d70705a23b5757" name="indent" arch="x86_64">
  <version epoch="0" ver="2.2.11" rel="30.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2.11-30" date="1707134400">- Fix CVE-2024-0911</changelog>
</package>
<package pkgid="9cc24888a5c434e9129cfb077de82e64624c1d78222b54534da02e604fc2bd4b" name="indent-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.11" rel="29.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
</package>
<package pkgid="3b1ef62563cca6cae1d02f9221e73c8e9f5c2eca1ffaa4a570f83aecc7019ea8" name="indent-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.11" rel="30.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2.11-30" date="1707134400">- Fix CVE-2024-0911</changelog>
</package>
<package pkgid="80a6c4491e82d33efb9e2d9a4a4ff1b4f02eedf0738b2899f5cc478eff5e8302" name="indent-debugsource" arch="x86_64">
  <version epoch="0" ver="2.2.11" rel="29.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
</package>
<package pkgid="17526c517870ba03047e94a1d7958c2f925443ab18228f9bdba0ac49c8f1b89b" name="indent-debugsource" arch="x86_64">
  <version epoch="0" ver="2.2.11" rel="30.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2.11-30" date="1707134400">- Fix CVE-2024-0911</changelog>
</package>
<package pkgid="1f6327722155a107bc8628631ad59f81be891f4d64bf2dafaed8979a4a9a2e4a" name="indent-help" arch="noarch">
  <version epoch="0" ver="2.2.11" rel="29.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
</package>
<package pkgid="cabd0d24d74ac84801d2f4357789a0228090a19a9a25c3969a31ffab992a5240" name="indent-help" arch="noarch">
  <version epoch="0" ver="2.2.11" rel="30.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2.11-30" date="1707134400">- Fix CVE-2024-0911</changelog>
</package>
<package pkgid="a97d3142729601be1fd9711e35812ee52279bc707d378a5e8daec63b4cc7392d" name="infinispan" arch="noarch">
  <version epoch="0" ver="8.2.4" rel="13.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 8.2.4-11" date="1667995200">- Change source</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 8.2.4-12" date="1713009600">- Add -Xmx4096m for riscv64</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.2.4-13" date="1716811200">- Fix CVE-2019-10174</changelog>
</package>
<package pkgid="11f9db32415e7f190b5cf92a7100bd906c53def6b04f5aa875cc5bf89a4507b3" name="infinispan-help" arch="noarch">
  <version epoch="0" ver="8.2.4" rel="13.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 8.2.4-11" date="1667995200">- Change source</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 8.2.4-12" date="1713009600">- Add -Xmx4096m for riscv64</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.2.4-13" date="1716811200">- Fix CVE-2019-10174</changelog>
</package>
<package pkgid="c2de9045dfa117936a22ebf79a47afad09d587f8ce9824014597dd28cddd2872" name="iniparser" arch="x86_64">
  <version epoch="0" ver="4.1" rel="4.oe2203sp1"/>
  <changelog author="liqingqing_1229 &lt;liqingqing3@huawei.com&gt;" date="1602590400">- update source0</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 4.1-3" date="1611057600">- Modify license information.</changelog>
  <changelog author="yaoxin &lt;yaoxin20@h-partners.com&gt; - 4.1-4" date="1661169600">- Fix not striped problem
- Remove rpath</changelog>
</package>
<package pkgid="c31ee9cc9a23e39126e7346a1f810ef5feec029ae78c2247ce8db28ac6a05559" name="iniparser" arch="x86_64">
  <version epoch="0" ver="4.1" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin20@h-partners.com&gt; - 4.1-4" date="1661169600">- Fix not striped problem
- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1-5" date="1687694400">- Fix CVE-2023-33461</changelog>
</package>
<package pkgid="d4e47d694f0f5aa3a25ddfb944a300d7c2b5766efc31995f37a22f152b336a2d" name="iniparser-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1" rel="4.oe2203sp1"/>
  <changelog author="liqingqing_1229 &lt;liqingqing3@huawei.com&gt;" date="1602590400">- update source0</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 4.1-3" date="1611057600">- Modify license information.</changelog>
  <changelog author="yaoxin &lt;yaoxin20@h-partners.com&gt; - 4.1-4" date="1661169600">- Fix not striped problem
- Remove rpath</changelog>
</package>
<package pkgid="bb3198d900d09358fd109d693f6a6ec1e3ccaa3344e746dd5dfbe9210b68587b" name="iniparser-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin20@h-partners.com&gt; - 4.1-4" date="1661169600">- Fix not striped problem
- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1-5" date="1687694400">- Fix CVE-2023-33461</changelog>
</package>
<package pkgid="68bfbded686c8a46c1eb25b9689791de694e202d606c08f3a463276727b40a4a" name="iniparser-debugsource" arch="x86_64">
  <version epoch="0" ver="4.1" rel="4.oe2203sp1"/>
  <changelog author="liqingqing_1229 &lt;liqingqing3@huawei.com&gt;" date="1602590400">- update source0</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 4.1-3" date="1611057600">- Modify license information.</changelog>
  <changelog author="yaoxin &lt;yaoxin20@h-partners.com&gt; - 4.1-4" date="1661169600">- Fix not striped problem
- Remove rpath</changelog>
</package>
<package pkgid="12dab939edea672043c7a2b89f38ce74da65ee1c97cd33834381793aea4f43ec" name="iniparser-debugsource" arch="x86_64">
  <version epoch="0" ver="4.1" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin20@h-partners.com&gt; - 4.1-4" date="1661169600">- Fix not striped problem
- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1-5" date="1687694400">- Fix CVE-2023-33461</changelog>
</package>
<package pkgid="57a4fda34c213c5b1933982ed388127ed273c42fc7b2e9dfbd55529e8932130d" name="initscripts" arch="x86_64">
  <version epoch="0" ver="10.17" rel="2.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 10.06-2" date="1627905600">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 10.12-1" date="1640001600">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update initscripts to 10.12</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
</package>
<package pkgid="29f9074341b0431265261a6c3296017ed6e11bf62d2e2caeaa98037b1bfa3758" name="initscripts-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.17" rel="2.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 10.06-2" date="1627905600">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 10.12-1" date="1640001600">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update initscripts to 10.12</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
</package>
<package pkgid="38643a325be758c25c8fe4d00ad402f4c88e6b4b8b3a8db14914c7ad6c1d4d86" name="initscripts-debugsource" arch="x86_64">
  <version epoch="0" ver="10.17" rel="2.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 10.06-2" date="1627905600">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 10.12-1" date="1640001600">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update initscripts to 10.12</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
</package>
<package pkgid="d8b19f1e197cfd7e974551f15846de762ae9abb6b4700f0820173c522d92c918" name="initscripts-service" arch="noarch">
  <version epoch="0" ver="10.17" rel="2.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 10.06-2" date="1627905600">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 10.12-1" date="1640001600">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update initscripts to 10.12</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
</package>
<package pkgid="cf31cb258ffce9a9a070e984e5547ad7a19b29fff5f5b749407fd6ce683f1cb4" name="install-scripts" arch="noarch">
  <version epoch="0" ver="1.2" rel="6.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.1-1" date="1646049600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:initialize the source code of install-scripts</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.1-2" date="1647604800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:get SI_GRUB2_PATH by ID in /etc/os-release</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.2-1" date="1649419200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to version 1.2-1</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.2-2" date="1655985600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for nvme disk</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1.2-3" date="1660651200">- Unified license name specification</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.2-4" date="1667649600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add support for mbsc</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.2-5" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:after executing hook scripts, remove their executable permission
       of non root users</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.2-6" date="1675425600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix missing Patch0003 in spec file</changelog>
</package>
<package pkgid="047e86c4fa318535990061689e7af62b575862a05657f39b503165ad04040b77" name="iperf3" arch="x86_64">
  <version epoch="0" ver="3.10.1" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 3.10.1-1" date="1641297600">- Upgrade to 3.10.1</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
</package>
<package pkgid="ea9d3d008d32a8ea5633000f19acc736df77c45361eecbfd520a5646a74909c1" name="iperf3" arch="x86_64">
  <version epoch="0" ver="3.16" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
</package>
<package pkgid="c40c4ae5c3fd4183c45216f7f7a3374d01425eeb7fb3aadec79229198c05f90a" name="iperf3" arch="x86_64">
  <version epoch="0" ver="3.16" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
</package>
<package pkgid="65bcb7571fa1b8015f6f07e80d61f698d7cbdaf81c5225a95f8a446a3f0a3753" name="iperf3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.1" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 3.10.1-1" date="1641297600">- Upgrade to 3.10.1</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
</package>
<package pkgid="6eb9ec5616eecbced3a076cc0076474ae049701b1097d2f9d9e9c2d72fabf887" name="iperf3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.16" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
</package>
<package pkgid="515c6a2f22c2531cdc613583f66f0cb69df90b9ebe8039f83acb936c168bd8c0" name="iperf3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.16" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
</package>
<package pkgid="5b0e8bc3f4d59e91f4854af56269ca1472e843e60906ec0dbf6d48ca111fbdf4" name="iperf3-debugsource" arch="x86_64">
  <version epoch="0" ver="3.10.1" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 3.10.1-1" date="1641297600">- Upgrade to 3.10.1</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
</package>
<package pkgid="7b1e9956ab1a46d63b3ea72820dbb3cc300bc49ccf4e16a9ba4dc2d0e0a39229" name="iperf3-debugsource" arch="x86_64">
  <version epoch="0" ver="3.16" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
</package>
<package pkgid="377fd1c1512b9646bdef27d647233372a9083be82ac4baa81816e1588dde4034" name="iperf3-debugsource" arch="x86_64">
  <version epoch="0" ver="3.16" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
</package>
<package pkgid="48a7ecf3c17efdc6d197dbc97bc7e7f7f485c541033b92903c489742652b35c6" name="iperf3-devel" arch="x86_64">
  <version epoch="0" ver="3.10.1" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 3.10.1-1" date="1641297600">- Upgrade to 3.10.1</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
</package>
<package pkgid="d140ea9e960c0ecf1172aa8f184972c8f0105fd2ac05e954d54089f503f8b692" name="iperf3-devel" arch="x86_64">
  <version epoch="0" ver="3.16" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
</package>
<package pkgid="fdf2ff9c4a6d9e7ec86d0e33385e00252e337e403ab05782bfb647631e588f45" name="iperf3-devel" arch="x86_64">
  <version epoch="0" ver="3.16" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
</package>
<package pkgid="f9726c3a9edab1488a92afa0acffd2dc876c7cb256ca64f3505037a11de8d456" name="iperf3-help" arch="noarch">
  <version epoch="0" ver="3.10.1" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 3.10.1-1" date="1641297600">- Upgrade to 3.10.1</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
</package>
<package pkgid="0febed297871137719d1fc78ccf77defe4eb9adebfc393e55113f0e4e3855ea1" name="iperf3-help" arch="noarch">
  <version epoch="0" ver="3.16" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
</package>
<package pkgid="a88f8f000528beaf352d80db683b48103212a52311125dbe7dac0a411b90b4ae" name="iperf3-help" arch="noarch">
  <version epoch="0" ver="3.16" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
</package>
<package pkgid="7dd40dea92c1bb02404a10b0c094955339b6b7b6c8d62ca1f1d8e2485c03284b" name="iproute" arch="x86_64">
  <version epoch="1" ver="5.15.0" rel="12.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 5.15.0-3" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove libcap-devel dependency</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
</package>
<package pkgid="08b90e227e1e04d9c047cc4f94e728fb99c362d965ed3cc6bde4569d5762b0f1" name="iproute" arch="x86_64">
  <version epoch="1" ver="5.15.0" rel="13.oe2203sp1"/>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
</package>
<package pkgid="e72cb849e83ebd3d91521f96cb356f753f6a89498ab9c50229a7d9b463d6dabc" name="iproute" arch="x86_64">
  <version epoch="1" ver="5.15.0" rel="16.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-15" date="1692964800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-16" date="1698235200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
</package>
<package pkgid="c8c73ebbd7746d4ea27f79968a62541f4eefc6c7852617f7d7dcd1136e9a7c08" name="iproute-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.15.0" rel="12.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 5.15.0-3" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove libcap-devel dependency</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
</package>
<package pkgid="cc25506eb023b801777d29bafc402988eb9d599c2388c72c4aa72f2749236cb0" name="iproute-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.15.0" rel="13.oe2203sp1"/>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
</package>
<package pkgid="8ca4a3d45d5ab81c3005ad9cde7a3f997f63537d41d2770b1240d32f154119af" name="iproute-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.15.0" rel="16.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-15" date="1692964800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-16" date="1698235200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
</package>
<package pkgid="c8ca07bd5c9d44375c0eed844b3268967767461d9da78c976937269d02dae0d4" name="iproute-debugsource" arch="x86_64">
  <version epoch="1" ver="5.15.0" rel="12.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 5.15.0-3" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove libcap-devel dependency</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
</package>
<package pkgid="6d08e2fc217c381d1d2f0557ffbfaefee1e64541c4e89a51cae06c885c8c2636" name="iproute-debugsource" arch="x86_64">
  <version epoch="1" ver="5.15.0" rel="13.oe2203sp1"/>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
</package>
<package pkgid="c81bc7e0d21fb450c36b00d220b6a4b7356e090482969d91d4b28573a813324c" name="iproute-debugsource" arch="x86_64">
  <version epoch="1" ver="5.15.0" rel="16.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-15" date="1692964800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-16" date="1698235200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
</package>
<package pkgid="7cb71c164c4f69de6c37b3fabf606855142a0b27792966fa7f5d0a0826fc477d" name="iproute-devel" arch="x86_64">
  <version epoch="1" ver="5.15.0" rel="12.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 5.15.0-3" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove libcap-devel dependency</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
</package>
<package pkgid="f4cba364bae1d157c99e561490c936aa70777b4a7d6dd3c55ea0589fd37ee745" name="iproute-devel" arch="x86_64">
  <version epoch="1" ver="5.15.0" rel="13.oe2203sp1"/>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
</package>
<package pkgid="99d3b3da12fbc98c49e172c2155072ccd8d96a3ff0b66deddd8f8cd0b75b06dc" name="iproute-devel" arch="x86_64">
  <version epoch="1" ver="5.15.0" rel="16.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-15" date="1692964800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-16" date="1698235200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
</package>
<package pkgid="7ebfe50a1bfb724be50978eb49484c504218ad62a46edd1821b2f100d114223a" name="iproute-help" arch="noarch">
  <version epoch="1" ver="5.15.0" rel="12.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 5.15.0-3" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove libcap-devel dependency</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
</package>
<package pkgid="8b7edd5235b6a2829b82cd63c332daca2de662c7114ad0bd88462b6918a164bd" name="iproute-help" arch="noarch">
  <version epoch="1" ver="5.15.0" rel="13.oe2203sp1"/>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
</package>
<package pkgid="b1f9a5617ce73253f806c2ac9e6a1ccda50ab0cf66b090a1a9efeae742d16094" name="iproute-help" arch="noarch">
  <version epoch="1" ver="5.15.0" rel="16.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-15" date="1692964800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-16" date="1698235200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
</package>
<package pkgid="f720b108eb760e9e447614984c81814dcafc7a05d86d2513a0a3adee45d5f2e5" name="ipset" arch="x86_64">
  <version epoch="0" ver="7.15" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 7.15-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update ipset to 7.15</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.15-2" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix IPv6 sets nftables translation</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.15-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="667c92bbb80472e4138d9faf1a50b7ad70897588a624ce050b4466fb0c4c3733" name="ipset-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.15" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 7.15-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update ipset to 7.15</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.15-2" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix IPv6 sets nftables translation</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.15-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="4e15d457935e7918cd578963719675fd244b28c3d0ca203b8fddd91e538a350a" name="ipset-debugsource" arch="x86_64">
  <version epoch="0" ver="7.15" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 7.15-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update ipset to 7.15</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.15-2" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix IPv6 sets nftables translation</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.15-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="0e384c98e4b57d85810edf51ca722c843192f6335b90eb1a36628c24ec7de915" name="ipset-devel" arch="x86_64">
  <version epoch="0" ver="7.15" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 7.15-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update ipset to 7.15</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.15-2" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix IPv6 sets nftables translation</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.15-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="49e62e5c9512ac5804e96e1799117385ae2b636baf5095dd235542380b4a8142" name="ipset-help" arch="noarch">
  <version epoch="0" ver="7.15" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 7.15-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update ipset to 7.15</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.15-2" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix IPv6 sets nftables translation</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.15-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="321d9089b8aa94ac9c59e590a8865dc36ed5f12135cc28d0256092ed7edc7155" name="ipset-libs" arch="x86_64">
  <version epoch="0" ver="7.15" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 7.15-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update ipset to 7.15</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.15-2" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix IPv6 sets nftables translation</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.15-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="043e9254a1ac5fd54d3a3fb3733a5e86abbcff0e7eb324d3ac1080c7ed76582b" name="iputils" arch="x86_64">
  <version epoch="0" ver="20221126" rel="1.oe2203sp1"/>
  <changelog author="xuxiaolong &lt;xuxiaolong23@huawei.com&gt; - 20200821-2" date="1615204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix rdisc: remove PrivateUsers=yes from systemd service file</changelog>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
</package>
<package pkgid="cb7dde4c26debdb80c6124f8f1cf4bd0b94fa0991dedf702b03a6544b9cd7b68" name="iputils" arch="x86_64">
  <version epoch="0" ver="20221126" rel="3.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix clockdiff host is down bug</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-3" date="1685620800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes for ninfod</changelog>
</package>
<package pkgid="8c5c6b771632ded327befe2a262e47ce5e544d1a1b2277c6479b6f64d9f8653e" name="iputils-debuginfo" arch="x86_64">
  <version epoch="0" ver="20221126" rel="1.oe2203sp1"/>
  <changelog author="xuxiaolong &lt;xuxiaolong23@huawei.com&gt; - 20200821-2" date="1615204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix rdisc: remove PrivateUsers=yes from systemd service file</changelog>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
</package>
<package pkgid="26a00449fd40eef896b00d5b939540f8879ec858bb0f0dba6576c65ce9b3c254" name="iputils-debuginfo" arch="x86_64">
  <version epoch="0" ver="20221126" rel="3.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix clockdiff host is down bug</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-3" date="1685620800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes for ninfod</changelog>
</package>
<package pkgid="1235d6cd3aac0fe4b92d3e6f472a679890ca6ab250b192e954256ab4f7a7ac5a" name="iputils-debugsource" arch="x86_64">
  <version epoch="0" ver="20221126" rel="1.oe2203sp1"/>
  <changelog author="xuxiaolong &lt;xuxiaolong23@huawei.com&gt; - 20200821-2" date="1615204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix rdisc: remove PrivateUsers=yes from systemd service file</changelog>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
</package>
<package pkgid="25d98bd54853e01ae03cbc6f5efcc227f1b7bf998acf33fac0c0d0466579e2b5" name="iputils-debugsource" arch="x86_64">
  <version epoch="0" ver="20221126" rel="3.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix clockdiff host is down bug</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-3" date="1685620800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes for ninfod</changelog>
</package>
<package pkgid="dab614c615e34d8dff2564e84363112c8c59f5f5c6bee9b4d9f9eeb22afa6c3b" name="iputils-help" arch="noarch">
  <version epoch="0" ver="20221126" rel="1.oe2203sp1"/>
  <changelog author="xuxiaolong &lt;xuxiaolong23@huawei.com&gt; - 20200821-2" date="1615204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix rdisc: remove PrivateUsers=yes from systemd service file</changelog>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
</package>
<package pkgid="440270be972ae2bdb9f61ca3b31471ed73ed3fb2f3fe0ae88a7b9194fedc2f6d" name="iputils-help" arch="noarch">
  <version epoch="0" ver="20221126" rel="3.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix clockdiff host is down bug</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-3" date="1685620800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes for ninfod</changelog>
</package>
<package pkgid="0613f5d5432a513d0829b225e022f0f60199de1024fc232545f20b10c902a595" name="jackson-databind" arch="noarch">
  <version epoch="0" ver="2.9.8" rel="10.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.9.8-9" date="1647000000">- Fix CVE-2019-17531</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.8-10" date="1702468800">- Fix CVE-2020-36518,CVE-2022-42003 and CVE-2022-42004</changelog>
</package>
<package pkgid="b1d8d6b26a798c608d16e12a82390616fa10111e39dab69b7f02154716182944" name="jackson-databind-javadoc" arch="noarch">
  <version epoch="0" ver="2.9.8" rel="10.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.9.8-9" date="1647000000">- Fix CVE-2019-17531</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.8-10" date="1702468800">- Fix CVE-2020-36518,CVE-2022-42003 and CVE-2022-42004</changelog>
</package>
<package pkgid="d8aca18cb1b189b4fdee2157b87e75f56ad323344a42e4e951b0446648c14fca" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="d0aaf3ea5b9cc71dede51eb845a007051f4512079fca1bead23b0846962414c4" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="9489900137d126c042ac9a0a4c6cb343c2e3d3639a7e6cf2d3146c50644d5266" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="a7afc2e689a9cbb76832a692e10f41788e5d8032700feda066ed655a9361a93a" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="9049b6b698e6543d484f86d86b0d1e5f1d3a2e9ea941cf6a79961a59428b345f" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="a22d4dd01c5f6047f4f59d629b4f09936d225f4831d306c8576de0ec328b03cc" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="e99f3c1b6453c404177d476cac1afdaf1f7678822603e1a6e5328433cef31809" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="4e00cd38b6ebbce413de71432f2dcf84e2a5252c81e319435961f6ae5548cd80" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="b22619152be0197863ab468e3ba2369e965be0d7bf26c5037d3fa8ae3e46dd08" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="80c053c13fb04a08ae17e7fceb192019bd95c66eb5f555d566f364c6b9354347" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="0cfe37d9f14043c1b90b93d2aef51aa648e89892a2b766066b56285d51e468ac" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="ccf4c2c033277c85e47e1f1e2fde7a049d6a36beb01cf073e04802c61da940ee" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="5843bdfb4042932d22597b76d535f9c3db5a4904088fcc7cc2aea78d221be9d0" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="d3b3cd773abaf20e2f1f0d9d8619c62107947c2eb2f461cf56f8a19a9b8c8ca7" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="189a8419ca643ca3fe5b26ce44f99d4822eb8341b9d07d48bfda3a13f9360760" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="9f1f2b8ca134d442380a182c4d45e18797bda31b640ca40286797ae51250642b" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="d1c7e47e47659ede16a5b6d99d3612d81d48c8288086f0d73d58ec6034e275ea" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="69f48373a7e51d68aa158eae8e563e47d3f0e48bab4e6c1a70bee65326983a71" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="db2109a6231cc4f3916196fdc4e81614cf077636d312d6e0a541d6574d7f9972" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="738b64154864ffafb9474ca04072f034d496e04494210ffec134a6a9b33c90c1" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="a4568cab79f617cdfbe3c0a6a15e3d87d10b62da57e224b4590dfa0ffd90822b" name="java-1.8.0-openjdk-debugsource" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="0f7dd65c6fe001748e06bd93c8f8c80d51faee893334c3945e5071f40aeb7efa" name="java-1.8.0-openjdk-debugsource" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="636e79fe95062f9cfb95e1965b9e0c1d3547144722ff73287081adafc95cf7b7" name="java-1.8.0-openjdk-debugsource" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="9d7e8bb02d853028e1209bc766d4ebf81e2566d8c10cc0013eb0771bbfa404be" name="java-1.8.0-openjdk-debugsource" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="522d22643519c05a4eca0f1506b31947ffb564a5107fb703e620635d80992dbf" name="java-1.8.0-openjdk-debugsource" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="d1dbc049ecad8852fff9f3863b4696125bdc0f01d9939542ae611d9497e0b3bc" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="e0c1c562c191f0042017a821d5e686a6b5d3901ed622ed1048adc1bba86c7b14" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="8d4f4b0b574d3dc0a472f7543f8e868068f1a4f0faf9f96a56130faa064fd6e6" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="f769464b1ee3761af71c2a5e5d9ebe233d8cf0a7efa3658e42f41faa8f6463eb" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="b1be704c2f15bf472ab59b1ada259303f40b8789fb6a908bd4800dd93d6d5310" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="ec3d463f88f2d824e12092e8ec3169b55d2aeda8ad981374032573e9356d1cad" name="java-1.8.0-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="45bf7cb1cd35e012023b9ab624aa4e158a4ff4c495402997585b1967e26c66de" name="java-1.8.0-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="061bba389a5c3b59eb4340e653b28569950d042f99c5e730e04561c049dc36c2" name="java-1.8.0-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="966b8ebc86804a25907285fb280137e07a14b9e0f8988dbd946486947a3b7383" name="java-1.8.0-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="b424f2db98d5bd6181bdf246baf3134ee9ca453c09c8bc84ddb78d0cb58686fd" name="java-1.8.0-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="156de73640a762b8a08a435d3af7d832e849edfeea3f6875dfdb96cf03367e74" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="26105e206e1ca855a247e4e12607b4eb3d5e1660bde7b8fb9253cf4f7d7e5e53" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="f3ed74d087c351a03ce50ef7b6f803016260e5ca49bba5ac3d12672ce81d47c5" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="dc060e768beaecad5bf07377f0bb1a0e3a671afaea289b03f8d30cc617683444" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="962f9145e0656e213786506947e4a4c6b84733e27b9b8f342956a5a592333676" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="a5f2a2dc2d818650dbdfa862e5e91df0bd2aa0c5c2750503fdb32ab0883df354" name="java-1.8.0-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="1ef9281a3fce7edd469281cd00fa5614ecb361807d43c56247a59e7978d473cd" name="java-1.8.0-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="70e0ed97f6feefc2b1c11d836b73c951493023ce280152bd683d6f76eede2749" name="java-1.8.0-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="18c88ceaaa7adf10edeca6dbbbfac1160239725b22358e61f2b9302700beded8" name="java-1.8.0-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="615d6ba60e25b99416e489e0d0f12a4e774bc50cd56ac9e34fd71bccd49718a8" name="java-1.8.0-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="4374dcb9475f577047f8c4dc10930de801f15bb3f683ad00432933c18db18a7c" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="12625f9b80890c469c283fa38764d1533ab3e6cd8e1185d36c9c1ea4e6e0d500" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="5acdc60a09e506cb436f03203d2a7e052f40615f41f892fc976597e48236ffbc" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="d83a43bab9892e8a8b35a50586e8618ad196befd6d356cc0a6dd0c89d079e4cf" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="3d10b734cf36ff7ad61cc17c1881c38d5dd6ad575ed8c7154a356871821aa84c" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="921d1295eb6c62ad63573fb37a083ae4daf6f6ff2d3ea41826cb49c7043c6991" name="java-1.8.0-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="ee432e575158bb87a506fa519124607528bf1e382e3dbd7eb56a9da72ba4fb80" name="java-1.8.0-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="98dc744cb1ffa50a494537da5737b4464a112cad738447a56772e615877e875b" name="java-1.8.0-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="a59bdceb1382ef4dd19803f72f9201692419bfffbe8267b804d9a3181613d71a" name="java-1.8.0-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="4fa248140811d4ad6fb02eefe0dcd0d54e22b97127b3eaef38408447e204fb39" name="java-1.8.0-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="20ea307742a15bea18996a7756fdc50542203c698d4cb799bce1261601b3b336" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="516050a0367e0c0e0a8c43c7a1099c4d19d0f3f58542e9833bb54403c6d38ce2" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="ff0fb320f097b3b72a0d97bb0ce955b3d38d30045ecae105c8e699f9945b05a9" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="f001330eac77d004caa15236e2a5993845d2a43de0db2e9bbfde8274c66083bf" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="6bee276074ee03955f9d74f12544f6a6010185e347b79ebfa7a31b00a185521a" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="4c2ebcf3e8ca305c642d620946bf2712902a221e6a257cb54c78ab5442a9e5b7" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="33a00d8619a208a3b4a7583b9cb64d3186a8c695806fe693604426552236d219" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="5d39458baa116c554b5325daa63a03a0b69e8c05817a888f9b855c67c46abb41" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="bc3fa44ac036cd526282bcd34262b3232d47da3988ad88b0e9bcf99c281040b0" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="657f9566293fc8b7a2a947097c6f0574907cd78851364854175c0c4c75d9d705" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="ae13dc3362c2b3c3377ebace6ef6a1b49d91ad0ed2b0a8e1997aef70193244a5" name="java-1.8.0-openjdk-openjfx" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="20e424fe215d9f5c366fa0c6da2c24af7186172cda57e9f19ba6375403762873" name="java-1.8.0-openjdk-openjfx" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="89a82f2c4c6ed29840dde0b4380e72c1faad57eceb783d09d5f2b6d467195336" name="java-1.8.0-openjdk-openjfx" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="9a52f9a3199bd5820538eb70f67d4b84f2f94a26fd43941d24c4e5ded521ac95" name="java-1.8.0-openjdk-openjfx" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="6d91b8c36cfa01da22f92b36499c3eacb7f5a161ce6c3fc08ceed072b98bd5e7" name="java-1.8.0-openjdk-openjfx" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="a820b3d58a4e0665b4a930c75012f63d2ec6ed636751f515c74312c71cf859ef" name="java-1.8.0-openjdk-openjfx-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="0e1fa36bffa11350c61722cec381a4b58ef476370431dec5f72964c13305b109" name="java-1.8.0-openjdk-openjfx-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="48f633116098a9436627df377f94b6b960981a8edd95fd2f1bbe0aaf9deb2ede" name="java-1.8.0-openjdk-openjfx-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="6d571e58cfe9c8f21a068be78dc4682437c909be2571154bed8e9bf7d17b04eb" name="java-1.8.0-openjdk-openjfx-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="0a162affcc1a735d702a06ab767cfc771986cbeea1468bc06be698ce881b12d0" name="java-1.8.0-openjdk-openjfx-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="c5f1cac22562adae5de5506070aad684ec50ce2f15dcce532d1eea51173a5d1f" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="0a2704dd63884c667f6ae673235e1cc858b2ea3917e6ff9cb5733604072c9199" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="8af99da213c580307169c7a61d723b33b1b293b7e9033663c8c534d073f1421f" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="49e498f6431155a7c33d1a32a8d9e772b046dc37397f242ded6ab59e176c7ef1" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="23d0b07f46d7c639fca8ea92cd62c1ea81aba760dd48ebf799aa6753a6be03d0" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="e693928746009ff5d7ef54b065a915bab5584bb29531a03252c6e29770c79b9f" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="286292db763a75902b6a070239d7b5a670b4a62341e040e6fa446a24d1dde5a7" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="c6106d8c9d6a6bfe51b2a8c49d97e13e7cbf0b9e7a1dce5e79e720a45bbbfd96" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="9c8d06509f018b966f368da44930250950289d844c51823843af3180588dffc0" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="d7f5756b120e19b5b452e3a3e35f89f0c1cec064fbc8e47f8730e9df5fe73cb5" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="6b921f4c4ce17bc93f579358ded94dbc975c4f8c0de0891f5d72a72272f22d7a" name="java-1.8.0-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="7acc848682326a717dabc9cb0513d875302c73b996d40572a5f03c002aacce80" name="java-1.8.0-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="1e07a34ad2975f58f13b775c954944d389175a2cae4c4ca3e8f57a5edec694af" name="java-1.8.0-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="277dc178b4f50810abb0200b6e99223492af4e851e886a5d775a380db770d74b" name="java-1.8.0-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="133fb816ef00d6b11bce7ed6b933e81113dcf2e6931ec279f9914ccd65be27db" name="java-1.8.0-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="1bf2d968f2ff77d0b992d6d5e863ec660d97570ffd7a2ceca6036c80ab837780" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="a61e70cbd10b909b48b77995596d289e7e56dc90cda967137f158ce4efcac2b2" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="88fd0b2a8782d77b14135847c43e3f3857d4f71cb9632768548e4b143c08b6eb" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="8bb8ea3264c97a71ee976edf28c06de9a8647d485c87bfb843ad34f05db1f9e8" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="5682aef460d515b101546caed8faa110e9caa74ed692f7a69684460873be99b5" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="71a505d28ca0d7778286ffcf5f7dbfac8fdb100eb6159e5c8156fa542b69a87d" name="java-1.8.0-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="6f59969d8e7e2de6092d29575dbcfe4ddb995810aa4a77fd7cdbca1ad43b2490" name="java-1.8.0-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="ef44cd2e21b7c514fbd9741c519647648dfc679d0a96936a6e12ba410c35d665" name="java-1.8.0-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="be46b95055061f9437bebcdd1efb9aa6a7f64160d8bb791f3b1c84d0167849e9" name="java-1.8.0-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="b7fb6143cfeeb47e1961a146dd464d32a9cfcb4f58a881d238852360d1ae0aed" name="java-1.8.0-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="4862d60fe3dc43ba652777b65325421520a0d433f5ca17a58b37f58f747bb7df" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="1a7d33eb702e0e2b27eb393a3109f9307790a09b049bbfcb17b2239b148482d1" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="60401c824792c825cb0df732995c856f7ced7c398269873b5f81e0b5a0594cfd" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="446fe37d0443eb783b972b69b4a52dfa17a6a9e268cb468abaa678399c5933fc" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="ab310940b3acd7d57a9474539422f147de8cca24c40546aca0add9fd6226e57b" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="70173e922e00c004e0a415b6be7eb79656a7ab1f2b300141838407befc70a3f7" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="26fd9137f0cada62275cfb904974d8c592b0ab681c7491dd60aa9b799ea9f8a2" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="e5bcd834143ce13cf7c3a76e820cbdda7973ca073e84f4d567329f3802565888" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="c21c2abe4ecabed96c6df31f882936834d7ff6dd1a793573c1af87a965af758a" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="1027088045fcc2c4a773ad77042988c40be1c839980288505d61901cf9c342e5" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="04884a4f36079109a0645ae2d237dce94b72ccefb2ebe4a420fdbd9c5f07030f" name="java-11-openjdk-debugsource" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="7c5e5221e7b5b970cf2eb10744ec3d9e868ecd6e584e7d3a73e9b84aacb2c418" name="java-11-openjdk-debugsource" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="e0b38d3257bd8fe064801ddc5ff517d21cbbb0862752bfb1b27bbeb4e0dfe40b" name="java-11-openjdk-debugsource" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="4474565bd1521071eb837532c8058d10fa237c5db9a77f22b344f115d567d860" name="java-11-openjdk-debugsource" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="7b196d604a3241460e42a9f6b75c2249828aea19e26cb40b9735484cfc428dd4" name="java-11-openjdk-debugsource" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="168fa379f115128c1ba97c6230f967a2265de624fcf22e242c1e2256ed2de8d6" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="0b1bd3cb73b94785e718daf6aaf37f708a30c1218c2d53e994e840ab77902edd" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="5706f4df010f8bf8010d02e3b5e837938c1be25065ad769bfdda410612d74e60" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="8d4ec6ca207ddad62c8364a60b3623dd0f5d1852683eb0edc95efae5f222b28b" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="7e39e315325f7d053512ba49c7c51b18b6f6ec93bd6f271a4994ca487dd5458f" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="6c921ab57e8e9b36c3c14dd24a190388dea0c7b83be7833ec2ace801dd5bcc32" name="java-11-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="4d558291d39185715e522d9dd3a46b0f4cfa721836ceb95b994a53e7173f7a50" name="java-11-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="75e7637d89199482079e3b9917d13abc085ddb4e9bc248980b74118e685d82b1" name="java-11-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="aededa2003928dd28ecc926c446fc6b5c0a3a49a0ee3f93a216396dfc9bfaeec" name="java-11-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="baa2328eb8a3eed78a0cb5bc9e317f7cff5a3465fa103b60f573efc3a24e2fae" name="java-11-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="bf47167af9e079c8a206c9ac240602ea8ef323f4263ef780749f17a80b12e6a1" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="b574c8d67448c60cc9d3a931531d1f0f064a2076cdb4bee8543ccd69284f7af7" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="b523d25bb8a0687bf132218960b38ee3b92f025e33efa847ba79636497bf4edb" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="8fee4aa6f43b2ba9f75e8b3515efbd82a7ddd48ffe1be90e30d0e3534e0cbd54" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="292c127282fd807ceee6ea1aa16ea0bc80731e2a94a80f50a2b1f3becdb0c71a" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="5ca94c46d20e9792e66b7d4a3069da16648f9619b0c983691194dc9af19ba980" name="java-11-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="55e75fc4238e0d8483e194ec55f2365c9d617e2ae0d752bee1c1a9d1a25214d9" name="java-11-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="aacac652d7502828fd67718b690631703304adbf175472b90a7c25b3c87eec45" name="java-11-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="ffebb3f18704151e9335efb59e1e908ec73fe0b6255e17ccb83c9785a9195a44" name="java-11-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="f6a2191a708e4c064c49882add3acf823101ed8aa5438c5f77080a5b6d84d114" name="java-11-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="c09678de7528dedd3983acc7ee6764526d6e53eeaeb35203c17a3f18c2c84c4f" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="24a4388f7a6b202709a1e2731589364d8d4fdfaa58c27961b175227b6164c424" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="31b6f9defdf7ef90931edf4217c207731cff969974ae018d7c7e8ecddc94c27c" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="96b764d2f999ec54097a61fcf9e3d567855fb701ee22f835552c02c4c2392c6f" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="72509efc52e7453630bef23dcc0f6c9bc38fb230e40e63b6595c8575d0406737" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="ca169979b2f6dc0846a40004803e92c337a4771916b38e153bbdf82878582af0" name="java-11-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="6d006c53bba89e554cde54024fe1afc66b351663f0d43a6c822c75d130ee9890" name="java-11-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="be45ce9dcf8be9588aa16c6d5160acb2ddb11468a4cf01c7c6b09ff6d1c1a2f7" name="java-11-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="c3a020474ed5740d2d556cabd2cd71a4604a428fc704eba2f9e80020637ef8e0" name="java-11-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="afd5518659a16ec1a646cf6eb7db0a3bd1a7f2e266857894d31be940b9c93b78" name="java-11-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="44282ee43fb91387b8d30bd48f019395c98faec009065067a10d91b9c5f523dc" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="2f2f3bfc8889598451ac4e14a61be534837f8ccb49b372696e37777c4d9c4419" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="fbaea05e9ab3cfe964556decc2a2b48a3e6fff2daa2f084ccfbe1fdd3f47a447" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="380030a968dae3718a7588f1f9ed1817eee465b4e9e3a5219f91d5a744857690" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="085e5dbe78c17f48c4ec2bb4fbdb27ed1066afa7893db986bf3b616a243b1d0f" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="c27e8824e60a9186943f3b896ad41f248097930ca26caf1cffe04342248f11de" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="cee536d8feaeb3df067eb463dbef7cc73589b3eaf2d1190343d5733a361d73bb" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="8ed2ac53b9cf61246eaca8b5d52142174d64929e9e31a3766897231c044657ff" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="f282f8de6a886fee20fae03c75408cd530684d9e1546f43cd4765e09941f77a5" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="1f1afc203a87f4c4c3b54fa2c2a8bb0818b60bdda4a6ec039b95052ac631b4a4" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="2321f2761c28898043caae77ae7f7203b03b52d111500f4561c014d4c72462ec" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="fae82907dff7ce43ba25bf406c065d93a43ad49f035e40c11abe504c38c8997d" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="397430861754e90e147718ab06ae24004cb0ed66c1c0be015e53436af1652cd9" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="3b513603970de9bf3b60b215456b9190c642f1a43f17e7e763ffc8f0e8362f7d" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="01bd401c6b4b3f1d7bce676ae098716b12fe7804bc193a67495cd9b00840bb59" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="ea98eeb679455c65bf010cb1484203b8425dac93daae985e27ddc3c7b5b55278" name="java-11-openjdk-jmods-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="50af348d56c9a3893b37653ef946b8d8f526d74e171c2168154fb7d78bbcd08a" name="java-11-openjdk-jmods-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="f43f554e343b1e7d64f8a97d958d0260ddb38b60918211327f95c3bffeda2f72" name="java-11-openjdk-jmods-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="f126dd6c5681295f78035f9402e18529885eaadb60193525802a1cea4ab9b5e6" name="java-11-openjdk-jmods-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="ccdef6c708c120bc8cfd5361defcf31ccd179db9e0fb6f306f2ed7f63703ec52" name="java-11-openjdk-jmods-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="6cce3920ec620601ac98f93790a681b1a7da1ee50e6ffc848b2aba925ad87ded" name="java-11-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="7cc72f6008e8f47237f265a736b6f76e592e7c587b2909fe586ccf2bfb9a4031" name="java-11-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="b53d268c517c74ebfc9b90d3cb27328a760787d1167228e30e6198e12bb0179a" name="java-11-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="b00ef8d80dadc9445a9c5cb5012091450116eb3b478f0722fed4843743d997bc" name="java-11-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="d69e69589107c356f3d1fb0656c90cbc4c7f19812a8cb86f46f855816cffb6c3" name="java-11-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="c062630af33d11fcf1098fc136158fbe55b5ce24c8300dd73546034a8a36a24f" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="58eaa95b4190f071a411d431165a3cae4e3b970cef141dc0bbcf3e0600e8e1c8" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="636a3f22259e8124a1befd2a0d3cbc0f451a5cd18174080a9fb0cc2bde25e95b" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="83f19247009a8161b10def1a0d83da16e9a7ed7fcea060579ba29482a5197e25" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="c0d7a9c63cbd3edbe017ddcdc0326632c52c422e6929d64315f1a3a3b61ed91d" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="67607cbedcdad19abe06a0578dbdb059ac604b1f27f03c11905efeac912b9330" name="java-11-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="3f917b236333174724ff37cb632277416bbecbb2001d7115f946bd2606110e7c" name="java-11-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="4737f965f0962dc96b76cb7c3933723789580c64d69eea289b78925df542f5a5" name="java-11-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="4be63e468b85ae300d90dce71664e3260a72c849525b99a4e8f08c00b975d4b4" name="java-11-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="cf691015d6a16a26e992653822a80fc94bf5c4a7c6cd7ef3301b027603472a22" name="java-11-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="3da9cf675a172e00ed0be59e5ca6fbfdc044c507676d294bf48ef3cb4a2b0084" name="java-17-openjdk" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="8533da22c8f1e471f8c06fe39ad7b6c4bb59ae1b53c638a147e3ea16ff3938b5" name="java-17-openjdk" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="d3b02cb9e5f4e2bba5d9519943de679b82db31558c9b2f8187b5da95cf57cfb6" name="java-17-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="721d41c46832efb35682cd1d244c55979c5496a418816ebf5fe1113be063c8f7" name="java-17-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="2fd0b6d9f12651d91252a5f4563da28da8d0a8664b84f10e9367f6a9f767c6bc" name="java-17-openjdk-debugsource" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="d0b98519baf1389293357b63c626e8016fb46a3e30280b38005c01f277045089" name="java-17-openjdk-debugsource" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="e5d6e160dea812cef09d87928a13528ab39b21869a287116f06191b8939b1769" name="java-17-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="e5709a0c0b7535c80a47f67b5e44620bb1b0c249e5507b516316f4eae40709ce" name="java-17-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="db0f00cb6fd47dfcea8dcf26ebe9ef5c6093fa4e2033f96f9d935c97f4854bbe" name="java-17-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="44df45bd13f9a665b791c3c564e7a8c31564196e711b7f6b72a79dcf67ea4fb2" name="java-17-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="5ab3fa49d3b66d13e7e4e74a3153f657bfe0b2e1714941a2482d1e748b325a3f" name="java-17-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="bfdbac7bb566bc6cb86f02430c0ee6d38fa4517220afea3130c66934e6654b95" name="java-17-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="c139ae202e3cf855416773e6bf671a92521277cda70e42bbda196bab4923e370" name="java-17-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="9a6f11017b9229be2218b4a95f0d982a43c3721679af18fd4810aabc826f9e72" name="java-17-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="ecb00219605b7b572e92b8ae10babdd4cfdf4dfd78d5169c73bcbfc5b8d2ce93" name="java-17-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="9dd862fa22b6905f1eda864e84a0346da63f2d9a7a17fde3a5aebe275c15582c" name="java-17-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="b7858eb29ef67d02109c8608a3431917670c5ce7f29a18fa06a606e80fd79960" name="java-17-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="3b93295c164a8e39808b0b8981314b4961302f2a36924fa6e3226b6fd7242f65" name="java-17-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="bf9699e0d96bb38c1f22485a7c36867560743a6c68144d026f950e83d7488b7d" name="java-17-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="64a7676c590946a2051b425cb17e0475748e2e172c99dc7b262a8761a5722a2b" name="java-17-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="0b924fb566a65c832a3cb8790136b48998f28bc203e195e4ac9a7b3a34f44c0c" name="java-17-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="e4529fb7fbdbd2a8366c1a943365dee6a97734753fb61965c29aa913ec3613de" name="java-17-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="be9251737b60ed00ac1aa1140ce3f66d24d1d10ce25f45477738461d4aaaa18a" name="java-17-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="9e17a250ae1c16958262f72a2aeca9b478de4c29e49160165de318446f1fb653" name="java-17-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="5be10685a48cf7dbb9317e54888b7ccb5a37e1e299064d475412bba897f1200b" name="java-17-openjdk-jmods-slowdebug" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="4a0cf9ee53f5f5825e73c6690f9d400bc4247189b6c1d14b4967f76cbf817df1" name="java-17-openjdk-jmods-slowdebug" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="bf3a2e1c9b618acabb5c3c2e90bbd1eae804b5848b997482f314e535472074ac" name="java-17-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="47f27b7e4535bd1f440fb34be963b604c325e5971f23682d624b2c12b07025b5" name="java-17-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="972a2a4daa2357c6a44cfdbc5ca61251ae3b8091c9b8550d985681b660fedef7" name="java-17-openjdk-src" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="c092beacac0338f56f55bbdff5a55eb4eccc81116ed3e1aa3671056e238a58d1" name="java-17-openjdk-src" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="61d3320f45561d6de15b92b3c086fe16bedd1c9b5e69e0857fb806f06271a701" name="java-17-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="074b6ba749d3b4401364c4a031d995f0b1723f9d457cc4bac47e66910de3a8b2" name="java-17-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="1413cbcf445ede96211658060a9dc1fc42cdb327254c9f80eadcecdf70f5fb7b" name="java-latest-openjdk" arch="x86_64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="1c5361da989e9a9a5ab6dbccc048db44f58f7d23daccaa871a55cc10b98e9799" name="java-latest-openjdk" arch="x86_64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="ef606ef2ce5f40b0cb7d51e8438f2f274894a2bcb5dd3907b3cf8079c07bab0b" name="java-latest-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="21247d9e4e0771ec9c91d0980f5d03a2c8779c0855b805b7f49cc2c05582017c" name="java-latest-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="87f23636bd8ba4436ab56d6c0b483fb6eabc8d662df62a77cbb21ae229a2293f" name="java-latest-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="81099dafffed13c9d748030bf5de41c69508f70835cc3ae1a16d79af8749e408" name="java-latest-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="a7f0780af6695d119287523d2c83133ad3dd983131fdced242657d45f66a2799" name="java-latest-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="6a1ae61768ed1983a83db7a0f51c19763605a48eea81cfd67cc784865f1a38d5" name="java-latest-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="8ade7de7253d7392f130b55f74eb9578c4b55f6f7d31cf0d08038119d7353797" name="java-latest-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="c81720f77f0a5f80f7c14b6eee22d33f0e07c801b44a27ecc65310a46cfa423d" name="java-latest-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="30095cd58da0886aceb2591c587f5fcb2172b6e8a3315c2080ecb1d0137a5107" name="java-latest-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="88b3c09042240e38ed07ca69649b00e83e8e1e3ab739a6ca46f2b1ee91b7c399" name="java-latest-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="f8c1a3a801f97db5e551177dacde0f4026d61d12d77d75c4ec5cf2b9e8340ec4" name="java-latest-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="ac22e220338d3fcb7a8234c8f5719620c4c8d8259b992f58fb17010ebaa223ca" name="java-latest-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="f2538810b1b2daeaa9c35bd0a7e3a4fa9fb81861ac8d9161c56bcc7c2f246dae" name="java-latest-openjdk-src" arch="x86_64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="71be184beb80ae0043bdee1fa965d512a0dcae464c9a7bef7fb8bce10218e397" name="java-latest-openjdk-src" arch="x86_64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="d58c4666f951b71484f9e682b32f6f5931bac95707404339ce0feb72b4875048" name="jemalloc" arch="x86_64">
  <version epoch="0" ver="5.3.0" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 5.1.0-4" date="1622635200">- fixes failed: no acceptable C compiler found in $PATH</changelog>
  <changelog author="weidong &lt;weidong@uniontech.com&gt; - 5.2.1-1" date="1626782400">- Update jemlloc</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-2" date="1635940800">- Fix large bin index accessed through cache bin descriptor</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-3" date="1637064000">- Fix Undefined Behavior in hash.h</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-4" date="1637064001">- Fix tcaches mutex pre-post fork handling</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-5" date="1638446400">- Fix spec check</changelog>
  <changelog author="Ge Wang &lt;wangge@h-partner.com&gt; - 5.2.1-6" date="1652184000">- License compliance rectification</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 5.2.1-7" date="1668513600">- add loongarch64 support</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 5.2.1-8" date="1673265600">- Correct tsd layout graph</changelog>
  <changelog author="mawenshuo &lt;mawenshuo1@huawei.com&gt; - 5.3.0-1" date="1678190400">- Upgrade to 5.3.0</changelog>
</package>
<package pkgid="8b85a657a4b0b8cc9204ad2a7ed295ae51eccacc87d3c7e37df447ba7bd06477" name="jemalloc-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.0" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 5.1.0-4" date="1622635200">- fixes failed: no acceptable C compiler found in $PATH</changelog>
  <changelog author="weidong &lt;weidong@uniontech.com&gt; - 5.2.1-1" date="1626782400">- Update jemlloc</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-2" date="1635940800">- Fix large bin index accessed through cache bin descriptor</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-3" date="1637064000">- Fix Undefined Behavior in hash.h</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-4" date="1637064001">- Fix tcaches mutex pre-post fork handling</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-5" date="1638446400">- Fix spec check</changelog>
  <changelog author="Ge Wang &lt;wangge@h-partner.com&gt; - 5.2.1-6" date="1652184000">- License compliance rectification</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 5.2.1-7" date="1668513600">- add loongarch64 support</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 5.2.1-8" date="1673265600">- Correct tsd layout graph</changelog>
  <changelog author="mawenshuo &lt;mawenshuo1@huawei.com&gt; - 5.3.0-1" date="1678190400">- Upgrade to 5.3.0</changelog>
</package>
<package pkgid="8127ccda0a36b952de2b9d6d3ed8871d0d4125bd70c400bb1e9e2d3cc53649b5" name="jemalloc-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.0" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 5.1.0-4" date="1622635200">- fixes failed: no acceptable C compiler found in $PATH</changelog>
  <changelog author="weidong &lt;weidong@uniontech.com&gt; - 5.2.1-1" date="1626782400">- Update jemlloc</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-2" date="1635940800">- Fix large bin index accessed through cache bin descriptor</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-3" date="1637064000">- Fix Undefined Behavior in hash.h</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-4" date="1637064001">- Fix tcaches mutex pre-post fork handling</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-5" date="1638446400">- Fix spec check</changelog>
  <changelog author="Ge Wang &lt;wangge@h-partner.com&gt; - 5.2.1-6" date="1652184000">- License compliance rectification</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 5.2.1-7" date="1668513600">- add loongarch64 support</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 5.2.1-8" date="1673265600">- Correct tsd layout graph</changelog>
  <changelog author="mawenshuo &lt;mawenshuo1@huawei.com&gt; - 5.3.0-1" date="1678190400">- Upgrade to 5.3.0</changelog>
</package>
<package pkgid="0a73c5e43e2f55890cb19f064d1c5f43b094b3197fb96e8ff4be9ee674b1d764" name="jemalloc-devel" arch="x86_64">
  <version epoch="0" ver="5.3.0" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 5.1.0-4" date="1622635200">- fixes failed: no acceptable C compiler found in $PATH</changelog>
  <changelog author="weidong &lt;weidong@uniontech.com&gt; - 5.2.1-1" date="1626782400">- Update jemlloc</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-2" date="1635940800">- Fix large bin index accessed through cache bin descriptor</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-3" date="1637064000">- Fix Undefined Behavior in hash.h</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-4" date="1637064001">- Fix tcaches mutex pre-post fork handling</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-5" date="1638446400">- Fix spec check</changelog>
  <changelog author="Ge Wang &lt;wangge@h-partner.com&gt; - 5.2.1-6" date="1652184000">- License compliance rectification</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 5.2.1-7" date="1668513600">- add loongarch64 support</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 5.2.1-8" date="1673265600">- Correct tsd layout graph</changelog>
  <changelog author="mawenshuo &lt;mawenshuo1@huawei.com&gt; - 5.3.0-1" date="1678190400">- Upgrade to 5.3.0</changelog>
</package>
<package pkgid="5a40197a1c24694bca50a7b0b9cfd9cf816b4b55da49304312366f6e888abe25" name="jemalloc-help" arch="x86_64">
  <version epoch="0" ver="5.3.0" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 5.1.0-4" date="1622635200">- fixes failed: no acceptable C compiler found in $PATH</changelog>
  <changelog author="weidong &lt;weidong@uniontech.com&gt; - 5.2.1-1" date="1626782400">- Update jemlloc</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-2" date="1635940800">- Fix large bin index accessed through cache bin descriptor</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-3" date="1637064000">- Fix Undefined Behavior in hash.h</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-4" date="1637064001">- Fix tcaches mutex pre-post fork handling</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-5" date="1638446400">- Fix spec check</changelog>
  <changelog author="Ge Wang &lt;wangge@h-partner.com&gt; - 5.2.1-6" date="1652184000">- License compliance rectification</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 5.2.1-7" date="1668513600">- add loongarch64 support</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 5.2.1-8" date="1673265600">- Correct tsd layout graph</changelog>
  <changelog author="mawenshuo &lt;mawenshuo1@huawei.com&gt; - 5.3.0-1" date="1678190400">- Upgrade to 5.3.0</changelog>
</package>
<package pkgid="b0f2ee586a0f3b9dd469fcff50eb10a789ffa6ba44f7fe2e5530fd05371afd29" name="jersey" arch="noarch">
  <version epoch="0" ver="2.29.1" rel="2.oe2203sp1"/>
  <changelog author="liujing &lt;liujing@xfusion.com&gt; - 2.29.1-2" date="1703592000">- fix CVE-2021-28168</changelog>
</package>
<package pkgid="4b0a316de3c433b62de7c8a3c4084f76a5344b8c765e4c26eb60c04f5853f5c5" name="jersey-javadoc" arch="noarch">
  <version epoch="0" ver="2.29.1" rel="2.oe2203sp1"/>
  <changelog author="liujing &lt;liujing@xfusion.com&gt; - 2.29.1-2" date="1703592000">- fix CVE-2021-28168</changelog>
</package>
<package pkgid="bc553e280d7c802ddb50a3e0a33d384c95ae01d6238f0c26b1bc0b78d21582c7" name="jersey-test-framework" arch="noarch">
  <version epoch="0" ver="2.29.1" rel="2.oe2203sp1"/>
  <changelog author="liujing &lt;liujing@xfusion.com&gt; - 2.29.1-2" date="1703592000">- fix CVE-2021-28168</changelog>
</package>
<package pkgid="fa94366390a397c997746911da1dd203b40bae3a3ccad8f5db7c8a778d6ce0b5" name="jettison" arch="noarch">
  <version epoch="0" ver="1.5.4" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.5.4-1" date="1701950400">- Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
  CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436</changelog>
</package>
<package pkgid="129bc2a242fe3d4bcfd11e004f17794cae09981889154f6721f750044074b149" name="jettison-javadoc" arch="noarch">
  <version epoch="0" ver="1.5.4" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.5.4-1" date="1701950400">- Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
  CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436</changelog>
</package>
<package pkgid="6b29f6c7f6849171a6f441d235750cfc0fccd01b001e8f9d48c7449a44b3fafc" name="jetty" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="6dec692ca14159a25d6e3b5f1e3ab725b6691b3b5d9e803d52054722a75f7971" name="jetty-alpn-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="d17b255895e66e27be64eb0d6b7730b1edd6072a07dcb40bd3dfe49c5ebd3eec" name="jetty-alpn-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="2674bc538478350d5c320d42f342ab13742d44a7f13162ea573cf842980a27ce" name="jetty-annotations" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="3bbca9e5bff72360ccd887039053a13f39d949eb00cd49cb1e5a15135584bae0" name="jetty-ant" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="a8f6f3615e53b0854f3fd918294d5d642d1412770a0133f7a315de8efdfcd4d2" name="jetty-cdi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="98aa08c6a87e0666f71832af3bf47438f308daa1e29972f3b1be644f47e6303c" name="jetty-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="0fbe2d2cab0d266f3578fd03c667d4580314756bded3f82f720ee0ae76094220" name="jetty-continuation" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="940b94eb8eefba8079d76ef766400a78919708c0606c88e5ea2269513f2c8557" name="jetty-deploy" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="4e99c4332e65b79977e39125de08ff69aa2a4006c3147e141dac3dd724a01f7f" name="jetty-fcgi-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="107364a2ba6f4d9bd91514fb1e4fc2deaa81718838aa498c5b50663728ad9a4d" name="jetty-fcgi-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="da8c2d3630450e6fc0bd483ca0b43333395f8f055d1c226a6dfee630fa1de842" name="jetty-http" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="12f9edbb684ec4eddd48ba29e53786d262ea017a88b17f55c62e795f428c7191" name="jetty-http-spi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="6268fba00599a74822aefc2cc76f0cbb42380c469bb98a054ac44dc344aa4509" name="jetty-http2-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="e875699e3b50881d0a4de14ece701232bff0240c8a12e8a51817abdbeba04760" name="jetty-http2-common" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="ad4008cb1c3986c3f4c088a6c4e8a465701e08460025be5f1b3d67836820afc4" name="jetty-http2-hpack" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="d16f7bf6cca698ec3a304f96ac647ff8379e2f864c93baeb6ad5c863a2a6ab45" name="jetty-http2-http-client-transport" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="f6ceae7654e4d8e003d295dc1923efa374b3b09e0469cec1643bec2904a91627" name="jetty-http2-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="f2cdba80f72738ed6efb79bc704ea6b69d5a1159f3dfa9b32171bfb464660e61" name="jetty-httpservice" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="80d234c8c45cd54735c1638d0256df3617aa096584937c1ec72c3ffe754652a1" name="jetty-infinispan" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="dec26e60c8dd6898f9a6b908e6c7554ebf8576e39173f655f5be6e6c8cf12a08" name="jetty-io" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="ee89c6ade84e56b3421548733fe560536ce549ab1fe8df697dc1cf0b28d48ba4" name="jetty-jaas" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="746da9bc97d3f47b67761587dbb8260bb206d365677c7f650d9b857764d95d54" name="jetty-jaspi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="e63d78f167920bfb0906f01fef667a4e4126e370b1af76d1d77122bce1540430" name="jetty-javadoc" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="215d48288bb9c78378f8d3b6ba693e8cbf75d7f06454fb1d39841c347e2dc8db" name="jetty-javax-websocket-client-impl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="c32cbf79612de70d7c91d717c6ff3ff92accfdb303ec0782da48e346d0ccbf0c" name="jetty-javax-websocket-server-impl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="d96605c91866ef4d86cddb0e4884a4385b96e4dcfdebf73455467eeff9fc1f33" name="jetty-jmx" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="1adb8d32666ec73e8ff03812d10cf066d24da6d1fb74a91712b4e09489612ae9" name="jetty-jndi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="a566ddbe61d8f6ebe71db1cb714aff6e19dc87c16ed9f9059a73fb2c6dfdc23a" name="jetty-jsp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="3faf3b1441b3fb2772b3ed544c801d27738264e90b92bb6f84ce2f566fb028db" name="jetty-jspc-maven-plugin" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="11fe738f2470bb7b06646ae0e42241d4e1de8748434fcd3e44cb95f28922db2a" name="jetty-jstl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="2454af4d164c21bb951ed26d968ce827baae05cd72b1d3c39ae6ae3b6cd689dd" name="jetty-maven-plugin" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="85c333b73c4d3f27209df5289219dd7dbf932772fd7e741ff0ff4270da348f85" name="jetty-nosql" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="9af2f843e8ab4c315eb4323f0df70b90ffe963cae3c4196df1342fd5256e134d" name="jetty-osgi-alpn" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="eb6f13abcdae72de3914dc8fb0f831f2d341128ccc2e6e17a1eab2aeed0b5b86" name="jetty-osgi-boot" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="8c1b592007ad3360b44ce5d5b174dc9b3a4c5cc369afafece09785e94f42e4b4" name="jetty-osgi-boot-jsp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="21838bbc7de240e5f8617c1bd164b4b981b82ec2596e34fb129127d6446a4a7a" name="jetty-osgi-boot-warurl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="475ef5acee093b3b60c95e8b71c9b0cb8d7fee4b13fa1b0ffe95b07b757f50b7" name="jetty-plus" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="4b65c68eab4c20c165c3a9401d5e4fb61db58f15fbb42f7a6a314c8f67d6723b" name="jetty-project" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="6ec6bdab334ada35d318933f78ebc5da5ff88f060b2b861d0c14adab4a284705" name="jetty-proxy" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="98669cf2398fb0aaca097ea9c3eb4d39a3153855b8f63a9ad6cc9c359ad7f7a5" name="jetty-quickstart" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="86742c8e4ccab71710c1f7971fc4147d5795b2bcc60dc2d6f703b0ba40e8bbd6" name="jetty-rewrite" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="5213f796e1a50cbe38eec170c3dd9b2d6ca49fdb0a6d87e3fb51eee981e51f04" name="jetty-security" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="b4f05bc7c48f4f6fa7de460c265b2eb5785943f2e3b1f45069bf99901e83c9ee" name="jetty-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="0b02d6a1bfc7b421c07d6acca7fa2b9c7b236eeb8f11b182c95130d6f899b717" name="jetty-servlet" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="1f6cc812f10c71b69fab2bfafccf9820dd2b6960934c57006410a2929dbd3110" name="jetty-servlets" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="aeaeb7840658ee793f671e2245526b9195b05e234743acec03eae9cf7576dab5" name="jetty-spring" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="ad5b5f4afb5e8431c7a8d656d2831be8cb1ec02724d94c036ee0d27db2f14827" name="jetty-start" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="38760f5d6f71350b5ac766c8a38fa95b11035112b9cde4c0b3cfdcd72080cfd9" name="jetty-unixsocket" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="dec5e982268e62909521f353b3ed4531b7cff283d1411e4db2f0b16805a109af" name="jetty-util" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="ee3dfd333621c81b87f9292d1154b775394855d4c93c656edcc1ce34e8f74d0c" name="jetty-util-ajax" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="b1ece04d1fb0a59d510be159b8e2e9d397b19fdf6be8f1c9114dd20a7e0d9747" name="jetty-webapp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="8cee6b6fdde3f22f15705475d94223ddc0512834866d76a049a64dc546433c5a" name="jetty-websocket-api" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="6ea7185e26a19a39b354a6525e20e967f3bac54aff76df691b5a4622a78d0605" name="jetty-websocket-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="c43669fff269291c16799362bb4ebd5fbadf4e1c325f64f6af69c3d037d32ee1" name="jetty-websocket-common" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="aa36b5317945e5dcc5e65496e5a4d71372df5e82d155f6eb050805017f1db941" name="jetty-websocket-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="9c563a3ea1f3f17196414c5440454b895cf940599d4ddf7792dfa53ff9d3fda6" name="jetty-websocket-servlet" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="0a86cdcdf37724e7f09ff2608e77990104bf4cb09a2c9e4566ec2928f1dcd28b" name="jetty-xml" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="6f4e80c0f33831c87d4e6a287fe233c289ed82da4ba963e60b8cb6ba235cd60e" name="jffi" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 1.2.13-2" date="1684411200">- Add Buildrequires apache-parent package to fix pkg_vcmp macro not being recognized</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.2.13-3" date="1687953600">- refix pkg_vcmp macro not being recognized</changelog>
</package>
<package pkgid="2aa57d795f6348899dda0065852b1851449f0332ba6b0ef04002ffbc37de8602" name="jffi-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 1.2.13-2" date="1684411200">- Add Buildrequires apache-parent package to fix pkg_vcmp macro not being recognized</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.2.13-3" date="1687953600">- refix pkg_vcmp macro not being recognized</changelog>
</package>
<package pkgid="1ff0f417f5d9c403c38097d04092a5365afa13f6057fee8fd09107ec941c8496" name="jffi-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 1.2.13-2" date="1684411200">- Add Buildrequires apache-parent package to fix pkg_vcmp macro not being recognized</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.2.13-3" date="1687953600">- refix pkg_vcmp macro not being recognized</changelog>
</package>
<package pkgid="ad48785a80fe3f5854547d90fb39479f49e0dad78c84e8a237af612a4354226e" name="jffi-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.13" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 1.2.13-2" date="1684411200">- Add Buildrequires apache-parent package to fix pkg_vcmp macro not being recognized</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.2.13-3" date="1687953600">- refix pkg_vcmp macro not being recognized</changelog>
</package>
<package pkgid="5401a29285cca187b319b97a928de55fa574382fb11398d3872a5e6a85667197" name="jffi-native" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 1.2.13-2" date="1684411200">- Add Buildrequires apache-parent package to fix pkg_vcmp macro not being recognized</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.2.13-3" date="1687953600">- refix pkg_vcmp macro not being recognized</changelog>
</package>
<package pkgid="c0a0b13bd61e480dc1a61b6525e98dc6c3b87ea5b089551eb72a6edbd0b9f2e5" name="jgit" arch="noarch">
  <version epoch="0" ver="5.11.0" rel="3.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.4.0-2" date="1663934400">- Add glassfish-servlet-api version limit</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.11.0-1" date="1669377600">- Update to 5.11.0</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 5.11.0-2" date="1680091200">- Add classpath to resolve NoClassDefFoundError</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.11.0-3" date="1703592000">- Fix CVE-2023-4759</changelog>
</package>
<package pkgid="43143e995558a0b206d3e9234512ac8f8cfbedcf3eb2c5896185ec74b0157a0e" name="jgit-javadoc" arch="noarch">
  <version epoch="0" ver="5.11.0" rel="3.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.4.0-2" date="1663934400">- Add glassfish-servlet-api version limit</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.11.0-1" date="1669377600">- Update to 5.11.0</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 5.11.0-2" date="1680091200">- Add classpath to resolve NoClassDefFoundError</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.11.0-3" date="1703592000">- Fix CVE-2023-4759</changelog>
</package>
<package pkgid="b76d59c4df03c72138d02448c9b34f3b76355722485ef736b5f09a17516e0306" name="jose" arch="x86_64">
  <version epoch="0" ver="11" rel="2.oe2203sp1"/>
  <changelog author="licihua&lt;licihua@huawei.com&gt; - 11-2" date="1712491200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-50967</changelog>
</package>
<package pkgid="96ae5c162781de7420d63411df53b91732b95fdb8d37b8bdfa49806e5957cd68" name="jose-debuginfo" arch="x86_64">
  <version epoch="0" ver="11" rel="2.oe2203sp1"/>
  <changelog author="licihua&lt;licihua@huawei.com&gt; - 11-2" date="1712491200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-50967</changelog>
</package>
<package pkgid="fa0ac8ac4b92d9814e43dc89843405e7d0412bec7263fd22cee946d2a2cdc9ff" name="jose-debugsource" arch="x86_64">
  <version epoch="0" ver="11" rel="2.oe2203sp1"/>
  <changelog author="licihua&lt;licihua@huawei.com&gt; - 11-2" date="1712491200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-50967</changelog>
</package>
<package pkgid="81abf281328d132dda7d8a32ea200688a8eafedb50ad3a8c1b9788a40b2d6f4f" name="jose-devel" arch="x86_64">
  <version epoch="0" ver="11" rel="2.oe2203sp1"/>
  <changelog author="licihua&lt;licihua@huawei.com&gt; - 11-2" date="1712491200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-50967</changelog>
</package>
<package pkgid="9a10ecada6ca3815155707041a8f1e29528b12c4831c96fdc1e1bfb22ac8849c" name="jose-help" arch="x86_64">
  <version epoch="0" ver="11" rel="2.oe2203sp1"/>
  <changelog author="licihua&lt;licihua@huawei.com&gt; - 11-2" date="1712491200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-50967</changelog>
</package>
<package pkgid="bc59429ca55e2f0bd514b2ef2f5d360e93ee4cadd98a4df1db97e87ef9f514fb" name="jruby" arch="noarch">
  <version epoch="0" ver="1.7.22" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.7.22-2" date="1678363200">- Fix build failure due to snakeyaml update to 1.32</changelog>
</package>
<package pkgid="84e4acab0658329ac4c1f008c004967c6b7ebe7a7b9f8d241c4e1931e26950f0" name="jruby" arch="noarch">
  <version epoch="0" ver="1.7.22" rel="4.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.7.22-2" date="1678363200">- Fix build failure due to snakeyaml update to 1.32</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.7.22-3" date="1684497600">- Add install dependency base64coder</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.7.22-4" date="1706270400">- Fix CVE-2023-28756</changelog>
</package>
<package pkgid="895f935f7e9f87b5d9bcadfd62246d2be14d0d88ec50fb38cb8d99fe2cb6e8e6" name="jruby-devel" arch="noarch">
  <version epoch="0" ver="1.7.22" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.7.22-2" date="1678363200">- Fix build failure due to snakeyaml update to 1.32</changelog>
</package>
<package pkgid="f7c3861ef64f3008ec447da708a01aa6670e5184c6311df9049520f8dc3999c7" name="jruby-devel" arch="noarch">
  <version epoch="0" ver="1.7.22" rel="4.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.7.22-2" date="1678363200">- Fix build failure due to snakeyaml update to 1.32</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.7.22-3" date="1684497600">- Add install dependency base64coder</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.7.22-4" date="1706270400">- Fix CVE-2023-28756</changelog>
</package>
<package pkgid="40748f8b816595b231f06d51c1f554a0268ad6b25e7144bdae6d88b1e9407dbf" name="jruby-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.22" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.7.22-2" date="1678363200">- Fix build failure due to snakeyaml update to 1.32</changelog>
</package>
<package pkgid="3c66b5bb554a3e39c6379cc64450a0b793fbd623588ce3bb440b02686e407edd" name="jruby-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.22" rel="4.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.7.22-2" date="1678363200">- Fix build failure due to snakeyaml update to 1.32</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.7.22-3" date="1684497600">- Add install dependency base64coder</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.7.22-4" date="1706270400">- Fix CVE-2023-28756</changelog>
</package>
<package pkgid="fabec19033f7370c0f0bc961f86b7507841f5a73d196a258525855114a933dcd" name="json-c" arch="x86_64">
  <version epoch="0" ver="0.16" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 0.13.1-9" date="1631188800">- fix broken RDRAND causes infinite looping</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.15-1" date="1631620800">- update to 0.15</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-2" date="1648209600">- move json-c</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-3" date="1649332800">- add check</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-4" date="1651838400">- add   backport-json-escape-str-avoid-harmless-unsigned-integer-overflow.patch</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 0.15-5" date="1653393600">- we got upgrade error when upgrade json-c from very low version,
  for example json-c-0.11-5. because old version has a softlink:
  /usr/include/json-c  --&gt; /usr/include/json
  and now, softlink has been removed. so, we fix this in pretrans</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-1" date="1667649600">- Update to 0.16</changelog>
  <changelog author="mengkanglai &lt;mengkanglai2@huawei.com&gt; - 0.16-2" date="1668427200">- add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
- add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
- add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
</package>
<package pkgid="4816a3e07e93a4173542686d93873d3b253d79ef193f967656c34e4a51943e64" name="json-c-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.16" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 0.13.1-9" date="1631188800">- fix broken RDRAND causes infinite looping</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.15-1" date="1631620800">- update to 0.15</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-2" date="1648209600">- move json-c</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-3" date="1649332800">- add check</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-4" date="1651838400">- add   backport-json-escape-str-avoid-harmless-unsigned-integer-overflow.patch</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 0.15-5" date="1653393600">- we got upgrade error when upgrade json-c from very low version,
  for example json-c-0.11-5. because old version has a softlink:
  /usr/include/json-c  --&gt; /usr/include/json
  and now, softlink has been removed. so, we fix this in pretrans</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-1" date="1667649600">- Update to 0.16</changelog>
  <changelog author="mengkanglai &lt;mengkanglai2@huawei.com&gt; - 0.16-2" date="1668427200">- add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
- add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
- add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
</package>
<package pkgid="cab7aaa324fe9ce5ecbb62573f28a3a7f250e0148fbd347e0ce4e2f5e217b056" name="json-c-debugsource" arch="x86_64">
  <version epoch="0" ver="0.16" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 0.13.1-9" date="1631188800">- fix broken RDRAND causes infinite looping</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.15-1" date="1631620800">- update to 0.15</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-2" date="1648209600">- move json-c</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-3" date="1649332800">- add check</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-4" date="1651838400">- add   backport-json-escape-str-avoid-harmless-unsigned-integer-overflow.patch</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 0.15-5" date="1653393600">- we got upgrade error when upgrade json-c from very low version,
  for example json-c-0.11-5. because old version has a softlink:
  /usr/include/json-c  --&gt; /usr/include/json
  and now, softlink has been removed. so, we fix this in pretrans</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-1" date="1667649600">- Update to 0.16</changelog>
  <changelog author="mengkanglai &lt;mengkanglai2@huawei.com&gt; - 0.16-2" date="1668427200">- add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
- add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
- add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
</package>
<package pkgid="be3101710f91a88099eff25ee4b4985f7b9d3f97893f596aa1af9e4d890c922e" name="json-c-devel" arch="x86_64">
  <version epoch="0" ver="0.16" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 0.13.1-9" date="1631188800">- fix broken RDRAND causes infinite looping</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.15-1" date="1631620800">- update to 0.15</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-2" date="1648209600">- move json-c</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-3" date="1649332800">- add check</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-4" date="1651838400">- add   backport-json-escape-str-avoid-harmless-unsigned-integer-overflow.patch</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 0.15-5" date="1653393600">- we got upgrade error when upgrade json-c from very low version,
  for example json-c-0.11-5. because old version has a softlink:
  /usr/include/json-c  --&gt; /usr/include/json
  and now, softlink has been removed. so, we fix this in pretrans</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-1" date="1667649600">- Update to 0.16</changelog>
  <changelog author="mengkanglai &lt;mengkanglai2@huawei.com&gt; - 0.16-2" date="1668427200">- add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
- add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
- add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
</package>
<package pkgid="f03fcf69c97c68ac802fa070d5880aec7fb9c0d1cc8e7d9942f6913edc0348de" name="json-c-help" arch="noarch">
  <version epoch="0" ver="0.16" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 0.13.1-9" date="1631188800">- fix broken RDRAND causes infinite looping</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.15-1" date="1631620800">- update to 0.15</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-2" date="1648209600">- move json-c</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-3" date="1649332800">- add check</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-4" date="1651838400">- add   backport-json-escape-str-avoid-harmless-unsigned-integer-overflow.patch</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 0.15-5" date="1653393600">- we got upgrade error when upgrade json-c from very low version,
  for example json-c-0.11-5. because old version has a softlink:
  /usr/include/json-c  --&gt; /usr/include/json
  and now, softlink has been removed. so, we fix this in pretrans</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-1" date="1667649600">- Update to 0.16</changelog>
  <changelog author="mengkanglai &lt;mengkanglai2@huawei.com&gt; - 0.16-2" date="1668427200">- add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
- add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
- add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
</package>
<package pkgid="e226c3e04feb9719e4c83dfbc14ac3b4d2e075c1b0525862ce5b073207375d41" name="json-path" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1.0-2" date="1709294400">- Fix CVE-2023-51074</changelog>
</package>
<package pkgid="b4cde9db2223316be7e2d02c53a679249faa9f524b665954af0c548188dc3a54" name="json-path-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1.0-2" date="1709294400">- Fix CVE-2023-51074</changelog>
</package>
<package pkgid="d5f1cc1499a261b6d3ac8179eef2661087bf9b20d359a992c8af8548e762448c" name="json-smart" arch="noarch">
  <version epoch="0" ver="2.2" rel="2.oe2203sp1"/>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2.2-2" date="1680609600">- fix CVE-2023-1370</changelog>
</package>
<package pkgid="3f666def4cc62426294d1f3207fd9f2d0181b4ce1d11f18cfde92c3f717969c6" name="json-smart-javadoc" arch="noarch">
  <version epoch="0" ver="2.2" rel="2.oe2203sp1"/>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2.2-2" date="1680609600">- fix CVE-2023-1370</changelog>
</package>
<package pkgid="5d515ffa2fb9f65caec03c55d46641487ccb9855ed56cca20a0a5c9c1cecccb1" name="jsoup" arch="noarch">
  <version epoch="0" ver="1.14.2" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.2-2" date="1709553600">- Fix CVE-2022-36033</changelog>
</package>
<package pkgid="fdf01e9468e191ec5939c130e25a85ce3a74c171c70c6b8b8b5f28e30d17f9aa" name="kata-containers" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="26.oe2203sp1"/>
  <changelog author="gaohuatao &lt;gaohuatao@huawei.com&gt; - 1.11.1-17" date="1623844800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:move timeout of waitProcess to stop process</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-18" date="1638273600">- Type:feature
- ID:NA
- SUG:NA
- DESC:bump version to 18</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-19" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set GO111MODULE off for go version 1.17.3</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-20" date="1645444800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:check file size before add nic</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-21" date="1645790400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:modify hypervisor parameters in config file</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-22" date="1646049600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:use host_device drive when call blockdev-add</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-23" date="1646308800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:modify runtime build flags</changelog>
  <changelog author="Vanient&lt;xiadanni1@huawei.com&gt; - 1.11.1-24" date="1662984000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync bugfix patches, runtime 0079-0096 agent 0021-0024</changelog>
  <changelog author="Vanient&lt;xiadanni1@huawei.com&gt; - 1.11.1-25" date="1668686400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add timeout for all qmp commands</changelog>
  <changelog author="Vanient&lt;xiadanni1@huawei.com&gt; - 1.11.1-26" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove kernel_irqchip option for qemu 6.2</changelog>
</package>
<package pkgid="fdd9be3db57a80b30c40ea7daec4d5c2d40ad0af61e0e19befbe9398f246ad74" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="dae9e2f8909fb523eb63a671abaa0bd6e5111c3013236bc76bf8bf05e9dcd85b" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="dc275c15df5996b7fdf541c30c3384cef9d10ee137b753843e1cd5eaab41423b" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="50a5c4d311778d44045ace91cb46796a1661f4fd108c48d63e84b4d7e5fba4e0" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="197ac3d02eb64ad78e27397d51cb90bca19deb0b4bd98a3b5050631178ec6a72" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="97bdf7e2e615a54372efeb544b6ebba2409a50710fd772c2d33252d69c8c67c5" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="00a6807f6ee218b4f70040182178b20ab61e8e7ed42aef624292d97a05e04c23" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="c1c6838d9fc52d7090edfc9b990d21e38296a2493591e8662a15d95abf8c9ef1" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="782723662726e0f1063c6008628b828b7a1fc2cb3a23127c46642e9d6e5d10f1" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="f6b7e978faa99b4e97622e992444b921a1bc604fbbce93ac9a576904e90ea921" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="47dcfa983f674a45e2ee58486a277d59f2f9f22b4e318f56eebbfafdef8345eb" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="a8c3514a267600494af1d90661fe02296273374f01f80233c5e93a8c510ebf90" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="d304b0dddc6c9c86c80d1c386460a60f2d61b7177ed6e2b9d9062badd4e2ec4e" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="6ed947e8790534331a941f2eb79b9fe409ad4a630e78a12bdd77e877686a6f2d" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="ad966cc814de7e1d889eb7dc4036c22c41229f279aef4db7e7d11b816f04577b" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="cece57aad9e722e8a1c5aa9ffb921b70697eac35b23f636438d6b7022f632f7c" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="7e63e6895d166b6f16754d1df73d57d4d31dd07760aa28730266606a86215c06" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="bc45608279dd46a6b7fefe6ae93dcf4ac418005b84a1a54d8c64ccadff43f4f5" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="a7a7c55c640a2ac135b7533d0f93a30eb9f61f7189c9eda49c10e8f0435e1d4e" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="352c0bb819884d49c805769d858f0f2ffb4b22bea4438c19df85d81dc55408ca" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="0195b483f266261ddf926014fa24a87eaaa76acf9d3b08af75ff5813644103ec" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="19e1296f78834c2b7b34ee4faac34452c4a17203e83782471a15ec2831e4c293" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="4077096ba54f23329482784aa7d1bd6d30c022095d66102f0a9fa3e840ffc0be" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="579dec20e5efe0f040326acadf392760b1be6a59e0591cebb439a44bc19c393f" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="14ef101e4c17c460edc6c0222152ba365d920acdbdb1b1fb432d24bb7e1a1558" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="90203bef63a4d17b8c3ab5445ddbf7d404fc124f64e3454cdea656f37f8ca3e0" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="1ca93e5610e1eb8afb5a6de918038c32f0808f39d43537cd428111474adb259e" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="cb89c1a9019cd7549532961f5df0fd6c0fab1a3880f490cdbd52ba3289d1edb8" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="e51953c0b3c26e373381f21fbaeec0d4fa6bf6b0d5cc61f3b9736e1acbad162f" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="7757a79da0b85a1e707ac61181e6f90a20eefa7cb69df17fe13a2c842c949f3c" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="72c3a9e58e10c9bf35615d25bf6e657eb76ff3c6ffc3f8ce1f38d98f3d3cb5bd" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="9fcbfb155c037fec3e2bc624ddb5533d9576f285d3a507ad16d8bec75b20d1ff" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="ab66a1f1f08a22600db5ed2f68fdc52e3da9b78ebd9d8c4b59f8030dae8dce33" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="65089ee514d83515f53054143cd56426d2ca0732e57aaf62da948796d0764ebf" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="2e9180620689df955c712f41c34c10fd8f4c9327d2beef9b89d92c7a4cce58d1" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="2b227f45d6a1e446f0d60ef2f7bb88fbcd2f027f4e87b7dea001295f4723b265" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="c16725cf29cf177a80fa5eda02e95de5bd0ac87a77dfeb894322a7b1663ddf45" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="af96518d45b5d2cd8e43bde9ab296cdd97b2311d28a62220dd2a21a000a7a895" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="6137620b9ea39de99f67d05a477c883dd13495a10afb388fca1c01f86cb2051f" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="e3929491739dc8c388fcdfc0be1b792ee3cd4c5d613d5ee2fc7605c9626ea140" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="200a7dddc14cdf2954ed66efa874263e0bed4b2d0a919335bba8ce4d6f325a0c" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="072ad2574e07873b506eb0e122bcd259dadcf706f50861fae2d07001b0a53bd5" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="dd58638f8ddd8229eac878a73d7579598f6cd0d038ee2cc284d783103c4b80aa" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="ce204cf0697b26161df81ed087200ec9763f3f2e4c22b571ca4fff597ab3e272" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="32384affa0e1ec2edf92c95751b0a4d6796d98754fad5f93192986c59a89a7f4" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="aecd836150635faf97e5b7ac653d873013c8d40edad95a467c4ce47db0a42393" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="4c34fe35dd08a5b2ac1473768916a7cc105915f64303479e6b7f719e06f94421" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="ee19e08103397fc15bf07cb3a43cdc19c8e59fa52570a963969383fe84bef3fd" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="1f73ef2fcede89fd429c589cd826fe2d7550256d6195b0b500197781bb9be0ed" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="b973a448501bffeba6be054157e101cfc2756eaf2e2182adb851a946930cb302" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="e27526de0b6eaa2260c4f1bdb56fdde7344c5f1a98e3dc1ea5d9f4b36926640f" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="7c5089c9534d201df34fa64cd404ce16e465a889117ebae0cb00baa575ffad1d" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="c97931706855b47f737729ac9fde7c0d8d62de24ce13b2afac85c25ec8a98432" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="8b8b347085656fa68e49557eb498a9111189c76864c12260d64002770ba5d98a" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="db307d9ba91822274d919b6367765bf23bce2981e3d917ce2214e088ab4f6bfe" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="f781e2d609a53937526f25ae1ba4c92debead3f4522b10b4c7a93e4a83bbbe45" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="9f55558645f141f67d39611f0a8d066cd52c5952850f87ffc4c147da1f63998f" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="d97ab241aee0d8f01f9dbb06b88a3bcd13b75860ab96e3c0eca5328357242595" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="8dc65e218f28394db457e74beddb354e972a4908cf19d126dff9dc31eb0779c0" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="41507f8cda27547f800afa24748fce91af564937c566116d12455405481278ac" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="3f92dbe50aa482874521b76fe4f7cf4a5dbdb25418c123d50c1747fda7c7e847" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="d9109c794a32613954fc535ec9c41273c5cac9655a8384f1780d1447ac22ce7e" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="531633788d05da2751c9577b946bb2e761721593ce913462766ca80c00b4d9d5" name="kernel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="79e39a50f17bf453062502e3a4ce436378c092e2df53fe99509eddf69f102ba9" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="1757ea8dc29d369d1a8589d55acb8cf685be56daa302e3e91cc849acc241eb98" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="68ed91a8fc64bc47c002a4f7a715bdca99d0aed2376dc3056b7762cb8acb7e52" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="3c577e4760088825fcd8ce7b623a8c1d1bed5708e56a504880bf73dfa1b84209" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="733fc6e4ed9ef9ba20ff01e55af5c6884e63c4a06ac999d5ad25594a60aa0231" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="d7be7e2ba10f665f7586041fd838f9c368ce40937e860523e41058d177435859" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="823ebab62d3a8afa401b214ffb77381c62bee8f34dd46cda9b58b602ebb39e9f" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="dd4d6355a02d89a6d3321fd4879cf0c6e4592ff04b5bb842d37c870a78eb675b" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="d927267fc0fb0f1615c790bdd82894d7ac82f4cba9a58944279b8bd860fe7dcc" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="55a99288f4ba04a0f539bf584355165828c50f6b22bb13f3876116cf88036b65" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="e20f4430da30ad43e0059930a0f0e16c0e9e347102c48a4427f91f569837aa48" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="fcdde570e8d8621d47f01cf985c85d60b03b7125b9eed155880c46c5701032e4" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="7cb5b52ae3575ff5b8b9d1f328615ca2524ad132838fdd6c12c133a9859ba4d2" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="10ce6299128e96dbd032899928323a25635741b6093fc26db535ef90f18c65ff" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="08bbdca93acd47a88104000073c13e79c67769927bbac5b66a65042c8446c604" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="4eefdc3df3abe569a23d8c581c5b27bf823fdd8f6f29d1db381e08f1ddf1fd41" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="df8eb054f36af2acf41a4048f1ffb707608af4a111a6eb2485f27e9a35e2235a" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="772c48d999d1cf1f57ead5a240d20e6e4d813cd832ab256f44108ce0b237a4b1" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="a508d470d1c848306d4983e7b834abab6b7f7fe4c84f4e81e09fcfb3bb6a8530" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="6593eb941e47124c6cd8793e19ed11bb14e5056a07ec097eae0814c3ba60d602" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="71c1c46cd341dc287514475ed605b4ad911f183df9831e93ca1beaa009965dd1" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="49233bbca7d3dbf4ebfb8576b658b0ad9a976330de4d32fd5b0dcfc7cc490d74" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="b9bc4d679daeda1de2318bd098708c7a7625451bbe07b0dba9ab8440383c4259" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="2666e925262a40fb790c7ff46684b9d1945a26801f5993b2fa93bf6046ed362a" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="1e77f105d797e2f1e415dabd0847d8b9fa043c0301c079827fba2483238a71b6" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="297c38630619fc37081dacc83123575ae51b77b41af630041211391ba3d7deb5" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="c43610a83eeea2532243b7cba42da839baa35439a0e5eda88a3b5dce3f14a5cd" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="d5d112b4002c710e9c6ccc1fc45a0dac6635335b906ae425a50169009e382e1e" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="cd5241236b7de73ae98e44d3cc19911968d9ee890e345ef46d7e21286f2cb8dd" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="612c2a64a4f44bf31c8bb408f0adb9c60491d29a394c0f22908c4e39dd692139" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="ac1b995b502d415e13c5f3c48385db524b8a458cbae46a1ff35d3897ad6451d6" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="4dfcac070842a6698fcf312aced6015f4135d96d79128e8080fa6a640fdbe086" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="c0072151ca3938ec1e741cc4a4ea4b34ff836e233e7f3e61840b5c55540f1ffb" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="8fdb655d279cf0a5801aa625479735f59859932b0fa692f46ee5c80406520f78" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="fec62464e57d3a08fdf0f5101350974ebecd063c35f42a5a61378c902eabfacf" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="a57241676d6b5844c16b12da5b4afcdb46e87eb46452e948a065b90d5782c43d" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="3ddcc002c7c3f5f5e8c5c50585f62377786f6bedc37ccc06714c0c88cc02ebec" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="00ac4fa8c8ec53ff33f0f1d3028dff38caf106e3322eb90d0e2b6812747f83dc" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="21efd134b556eb441ec2bfae153ae5c64e39d1b28f559fbd242a3b6df223e79e" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="cadee622745e0eb6dc2ad067092efdebb6cb174e1088b9c2b620e3a8bd67e5ac" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="090e9f5ce04d2ea0bdbde46f89a5bc10ded5d454b1b0561b6a353c20fda188e9" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="e6d4aa472ea0fcb1cf6d9ebcb81c74553f26672e69f095a762eb0513a7af5da8" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="968ca63031b864ce99bc97b3f8ad71391d8193870b0279f718a9d081e168c4f9" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="19ada852eb02fe11cbab732dc92d9519c6efd98ada6d2be391d384803cb7524f" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="e883527c09612f8c7e763d11f4950926af5a723c6360646dae469478ffd00f83" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="122567accf5172af3b7f60d0365669048540d01ddc2c11bfdfc6d69a5baa35ba" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="2d69d3de8502d1bb0ed3a9457b45b5d4fa98e2d28c5e2df9e2effdc44ed359b1" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="2c3feac1f38755820337c89f4c1e2b65cff2071b6d62a4018f1b5c784b8872df" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="c6beb87975ddbb5118f0e7c7d6d58e0ac54e4abeb9790dd75643c11771144825" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="97e1df2676abebf34453fde62b7e2fd0028368ff1f7561998d6c01c8c2a1d113" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="ee9f577c9637cb63d5b13d5a16c7e88f78963c397168fb02a86906f80b8320e9" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="601b5037347af625d2336a3e3619019cb5c0b866046c7117e7ce32a067eda043" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="19362fcdd891cb65c398d5c687190812fc47a9dcbe5a907a11cb2f5051a1c8b4" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="0ae24ab8c2464072637ce6ebe8d40eab6514445b8116f94f5ed3bc81c51ddfaa" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="d232a31feae1d250526c30bf003ad8b187fddab6a8196738c27517d2508f83e8" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="0d0863bfafb4f7e6d4579ec48cef642779c6c4ae7f221344b4c7a407b6963ca9" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="0309f7cd75160c0a997f893708f3cceaba98e44fcca4ff2296bc57bb07d50c6c" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="b64a4e87184d177e58eeaae7e6175dde46652f3dbf08039510d230b242316afd" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="c326bfc276f817556aefd1a684e1d68e202cf2c20d481cde1664b538b7271804" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="d3de613f02150a1b20f83503e0d904c5795249f12d9a7ef3a50b10a731e81989" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="4346b10a125a38aafe5c3e7ff1f31849c541ebd1a9db8c1af8b71b6c1e1dd5af" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="813b2cb90b2e1f046e17be0cdfea13685a304b4ef0a9b58a938c09675e4c0e54" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="4fff372c0b139f5963dff15b68b63adc41b5752058ad53a4a8082a70134b658a" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="9b87f3bf77e0e421585f39fb753bc446e8f733eaf25fda4244f5a903daba88db" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="2af17eae39cd29ba05e9d618187c59e5792fd914595234b420723d6c081290fd" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="6c680f033125b501c48cd7ec903edd8d1af2f7c976407f18fe48f9061ea1e2c5" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="b7ad0ce86c0e327f43a578d5c1b068862dacd1cc215f11eb74edb1174286a4d7" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="4bcf6468b2b5303e15b24e7dc1301085a67715dd78e6632652d851c4616cb4e5" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="ce1841a52165929a40e756c9e9b72f7667fac75bc3244f8475a22d5d33dcdc99" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="11e776a05db7a7337eb77ab8ce894f5d9aa4ea498b3fbde6ce32718cf2ac0c07" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="2ceab87ae55203e625c7cf94a91705226c738dca64465b3aadfad067536b9de2" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="c144832f50064dc1a7d90a17b58bcdbf371db4c85dd3b5bbc6a7ce5dff744d4e" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="589aadbcf35b2454b3bfa7e9ad46f912c88c63aff6e9d512f8e539ecaaedc06c" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="7461129000c1a31e70c5b3c2569c632513f58bea49db371fe750b563045d9ec5" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="96afee149064d111784e59212d4ee4be582e450fddf4ef943024c03647e4cb16" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="5d8d43fc58cc02a734fde47507f4560a92394311b37df5ae00f98e5f713d0a9f" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="319b2afe5b24e37bbe057dc77c0696f55bf700173f87d46b653129e4733d8e31" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="030362af90b9981653343333727848bed524265345458aaba5e89b09be740676" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="e289446715d51c31af5cbbf8901efaccab233631d4d4a7f010a9f1f6ae9e2106" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="5b31e17090d642b819534a87a7de6104619499810f186e2118b9121313c7b5a2" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="793cd6e669e6bfb2f9b09a040dcd4b152faa356980e877245b44347a0eeeb907" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="5ca819a3830e81e3a74d35171211f4ef4c69ac4a5ee5040f5456607aff7ed72c" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="b7d52d091cef1316fc6d90dc4859f705475f35dbc54ccb4a92d22440c015d660" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="53308e9796e663f8cdfb294d60c4b4ed901a260073b13fcff6883f3305276939" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="9fa7fddbd1d2590207c4453c0cd6f7b9dbf0f4ace18f9b461d4b255e8955f790" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="fe468b4655ecc3f055a57c8b4ea6119c040c8af8b0a2aa73c6247473938cccbe" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="6dc0b1aede420c2c3c3390c2264dda6e224ff4106de8191bcdd8511d91ebb287" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="4e779ec6f76abc2580443107d5e669136347655525a7e717209ba029fd81f534" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="bbd14146d27632c4fc72de23b29a3371938035b46c879ecbcbfe7f6b687d244c" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="cbabb72eba275d6cedc2ac4cecfd23ddf178cc37ac6508aec3df54c8250f969d" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="57ebb499edcfde4df4470e72a86a1ca537ec0ac19a46699dcb283c8cdbb04820" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="e945d8f856f9aa3c2bb3a826e31285d174f59c955f0f8b4435d666e51bad7236" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="1fcc9cb07644ebbb7459a805360d162fb267037d361ac0e3b0175acae79bd4bc" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="e59d4a27f2d90b537e91ce1766f72e34a09bcb7df846918f9c4bd2775511ba69" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="911fda6d2248a0e01867bcc6ce8f15f920528f46c8b08dd3b5bd053477c7cbf6" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="b7585612b935662eabb7d4661fa172d30d0b0a528f2acbb2c7729161592a718c" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="4228bb61ff9c22b7733bea3dbb1ad2128604b3ebd92432a4980a65c3351976f4" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="cbbd80424554948cb440b45bc9e4f9e7df6c1e9c183cba76c7dc9684a7458815" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="1bb1456608306e3f966d7735f14ec97c0dc658476cdccf31453f87fe92b68f9f" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="2b738e6e2096a2a6c89b00dd520f7bc38d3c4eada482c713a391170a340c6a08" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="1d30d9b336a5b94be294af5080e56597ce334028e2b6a64d3c9c85ba3ec3fd16" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="36d1b4ad6dac38cf5524c893ca543f2169676d6f0d50518cc84597bd82790c56" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="1f5a20f599be8b3dfa0b49423e7698422d623ea8aa24e5e1886f6fc28ecb7295" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="8c6d19c2d138e7e46f15aa671f1b00b72fa0ec2d3aa14be08dbc9ce34361da2c" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="b7946f042e7f5170f87ab869d3c09d4da65d45c37892a07aba0818dbb15d5107" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="6abfce941a68c181808ab154a683a44617f7e87ce3a5f443a04755e6be53fd85" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="e07949faa4bc1dbeae31c212fb3bc83c50d1d938041234e477fc8f99f4abcb46" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="dc88e8836f79dcef851421fa783e4b8404cb82683176b35fac823487ea58791f" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="bbce060abe349138154ed734473ae9ea66acf2e187e65f78be5c36010bbd4140" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="4aba746d7c379523db863a76ebe433abeffc3904b81eaf4a3af83b6559d42a72" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="a7d81248e5c14fd0a729b6aad08782b77188e34a347e0d55798c791a02219eb0" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="2b69eef24796187df794fd925053b46426d980f397f550b044af00018847db64" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="32e937f5feea291d8b2a5779ca9b1f44b855fb34534e2cc17012d4cafe3ab35d" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="534e5f4c41475e898b990c6d510b9e1a6af56cfb0e3c47053bfdf4004509c274" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="bde27d0cbb4dc2124bbfda9552f85814257ae1d417fb4778b45fe6317e1d7d46" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="a86061932167258ab89a61ef829e1486d37c52da1b3e9790e61cd69da142cf45" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="1d68eaab3e0b338b2a5e3ded9c8954affdbe0691c634de9bd9990f8d3f6e39d4" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="f2e85ce2561f3f1d33922684ad575f9a33b87a03c9531c05694fa9a75d3e77e7" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="0f83043e92bc65852fa047119319d181fc51df08620f25a6458038649497f92d" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="32cb1742e9238fc90b2e9a2f960655b142566fb6342b4190aeb49b1e8a540681" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="70e38399c94e83461c93f83c6b187afd29e89f4a0ad9a66caf76f5a4c9c63428" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="b3967bb4bea85413afcce3ec2f3040892860a62019caebf07bdbce9122cfc3bb" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="365d2e5400eaa2c1cdf28447b1b260820ac6a8b117f975ebc6c8a777bc5b0028" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="5afba8bfda61ee6b1244fcfb14d8085b41f0c8da9db6a74d4ad4737091910e81" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="4d9282dd78c479beae97b43913eea02f31289662c4a746d751b89884bbb7e978" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="fa30b3181701ac15d1e554031879a459adc7e2b7dfc28655afdc85270ffa6121" name="kernel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="465beb33a3c4acd08e03dd5f578ba93e6fd613a16d7969419f0359eb5c3aeeb3" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="9d8fbca65c7325af5f94097d45f83b21328511f87cb236fb79c303b5d1865fa4" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="ffca6a36d531aff29e82ca6abd2c928f75750a2dfd9a0a1ceab4664b7a217818" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="cc8028cc6e59756bd03eec5ed658c6ddfbffc212c54307ffe357793d2e74a962" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="92111ae9569d0d1cd0575436f19d743f07961e356f538817504570d5eeb94e1b" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="a5b012851e535646087b574f5d55935f6d9fc1dcdf9d36a4ef1f71dd7dda7e65" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="b938503fd452d55892b30abe1349949d971de12f1d7a38f66007ffa6e2a4f5c0" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="ab29566df293d31726d88be71e83409b603f27ce8d9941e6b5ccc6b4dc2d7497" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="2ed0172dea858721f8531ebc78d0d642d490d982302622cf185ad90c63368a3f" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="ec0eb21b79f3506257937ecef8b0fc6d1072195ab41fac3d80796f3088fb306d" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="d43e0e7e7129eb2edf3de688f02d2419f8895073a0c9c07a49949da6b3149900" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="30f58e549cd28cdd3a4db672e34280f15fe51a35e758252061b6d574cf2f9a89" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="4ee02409d7a570ea9570d2cba65478371b18daa285110edb511b8ab1098321d5" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="7e8e3e3d2870a74a7c5e618b69b733a04628b21ab0a0e628200c28f16a072ebe" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="c4e7db8978c34f66e98d64bd8c3dfa363fdb2d7b0e3720f1d4ebed8d97652af3" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="667e9fe0d633a2346cc21bd6c54c7a9bdabdfe1709c1795343d3c0975bf7c2b3" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="9d0a96d1b4199f5cd2dbde1c42991d444ec36701e4837c9ad3e15d52ab34739c" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="a32a8e232f3873baa35fb50aa71222aa6e133e135034f023aa2026c5fa4aaa84" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="3bafbce0e9a69c76f53c392d7dda08aa51a0e710ffca667533e8f760ea4e1cb3" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="3f5791318c22b39c4ca709dae5ccae84177857e353553e55f36d8241ced26a74" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="39da68e1cb0c3485fce2bff99323cac45c993a0aa8185d511d159d5304fa4bb3" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="037ace35bc7b4b86e0b39638de50285f77996af3b9c874b808fc0881669822d2" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="1aac7a36c1080642f5fd8f7f7a5ad72e2ea9ec5711a87e66a5e0297165ea886e" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="c06cc451ffa04b8fca03159dfb895d412e32827f0e94a3fb65a82d0ebc5c9c09" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="60c2d982a8d4012e904de3aec0c358c6a001aa132f51f238403506df7f9ab77c" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="e8a985c3d47df1529fae40bd6ef358e2eb9c489f85a8481975047e19d07ee909" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="7132059458a179cc02bb2015230f9e444bb71101a7a01fbd615df410001146e8" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="b9f677b816df1a5d9c783ea6fb624f30db1b89ded82816e7c185e13de4574782" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="62ff33a672bd59c97d17e07817e00b085e87e5f9c4d7507b88a65a2dc26e0dfb" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="30365b6d16649da447753a258b6f94be9f772f79b3456b45535f3e39b7843328" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="ff9acce3ebf6ae6c07402bb48e508d9a16e5a4ce6d0c2c8da1e54d11cffed5cf" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="fb0bf77288f85d59aa0f79a4c1a7f2a8eb5140bf985d273297a766d33a2d181e" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="214fb523eea9b8c621949eca368dbb9d64acb299c294a3122176c3f41cd0759e" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="8fa23554328f2ab86fe7dc200e024633c26a262ee0546b1d4e58fae8efb3f665" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="06b2426da7cba8b6cbcd30e877d3ce45c1a45ac3efc2c1946f2b60423b9f61f2" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="057894aa5b2f9d9c87e6db0b68c573d683d171089f2339f7d74d44d4ceef28bd" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="5f3f1d29fbb9d0b93cc0044e7159f9871e1dfed9e226698db68333f5ff1d979f" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="612d4ca797d93f9fbf903bfc1bcef5d91b9dc09e218306254b2ed1b363c4eb94" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="907db52dcbfc35069aafbaad3281ab866a595a23399196d6c41eaf0a72fa7a6a" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="720c3be9fc2ed0812d05c4a911e01f40a3cfa33d709d976a9f7a3b22a18dae88" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="1b9b363a95a14188bda779fda15c4a5fe1a730ac64a69b704974506cd555dd77" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="6e1640e42174a6c2a899fa9722d70d60ec1bed24909a8fef32b188cdac2b03b9" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="cf0e1c251505da6cc1cce9f3507ad04274f60cba8ff43f90a87939a025af3a4a" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="b3f28c9919572a05746a1c510f4c812b32c7f4088874060f00186d1f42165603" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="4f67b5df089a49b58ecf263f8440bb035681f9616ac7475dbf73c7975bfd56f2" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="efcd265fd2ba08f4e5a5b9f6194d93399fc5ed270ecc4975466b00154d5938da" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="bee5409cd7de29a4a1bb5cde47dc411324c08a9bbbbd022f2935ffaf8bfb8e5a" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="d66c189795344e90dba71f9ab0574bfc3f1ffa3d4502dba737359a83ba7b2a2d" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="5c30cdadb416c1161f7c9f8136b3514ba91e8c14ef55684b50ef382eb081f23f" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="e6031a79c776dc30a6fdad013e516ba66261409d5491e869c9f5186e374bd049" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="6ba5d0eda3956ea95c35e6f0a86ef03e6d9c7d69b8ec89325cbd2eea7bd5f32b" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="294a27be7a729d656f9e6e2b0a87abda0e6dd27354ca5a6fc988422b0020815c" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="8f74ffb0524253d382cfc1f53948a105e29cd0c72a96905c2847b16e9014ee1e" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="c48b936fb898edc7fd2127176bbb84d3a9537c5ba453f5b7e75f9e3cee4075bf" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="504e11f8ad2bef3c4aa471bdc6ec8aa0d36f62efcaab0cb0ddeed887955a8690" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="da7f90ed715d4f2066ab11abde25d2c3d1676731d54509f577e6f19f83c33104" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="d403469c3734ef22fc232a61c0ef2210db42157eb3c70997461498a45e4a52ff" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="075f5cd57f9b285ad7b0e287500a5a3312d3902139239953eb4188b08cb6cc82" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="b8e62a81c088f00a18d11b74d6790a61670c10994895105f7e7baf351a4cf966" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="d0c9a24fc6fff9bb19ebdeab35c9e99ace3a9aec37f795dc217413e666741fcf" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="3d2d5beb2328e836754772962c8803a79166307f40fea1cf05cfba2c0d1f3baf" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="3e90072a7f615941bdc0d3a8edf7abdf06fe67be1d306ea0add9e461442c4e48" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="84e87b3c7d8a225d89d60b90ac6fe19dc10317a72a6b3243878414bcdfcfec12" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="e1f680d29eeb15373f22017cf0a471fd4ee28f5a760cefa76875e8dd61cd8185" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="ddc6968b81c2409ed85f0995be6434d1fb61c904b9427b36ad55d3b7531601d7" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="9459eb44a4825408ea1e7b4c6c8d3264d499002085d37bd41ab9280164acf94a" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="6964c73138b06c520b505310c0a00fd48a7b1b863c9853b908c8eed07f4ee3c4" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="72f06d119e6a0868fc3ffeab6a01b8afc2202e2b5ecaf1ff6fcff6b4b9cd97ca" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="7e051d6e187d77537ab835038257f672b16297d8f6f4d670045e145e6c255633" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="0d15cf345212cae62ed710131853e856ea3ad695e1d1ff03e914ac17ccdf4e02" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="a0063d0a4509d2fa545a144427bdfeed0151eb27faed88145c9a9235aedb346f" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="0dbda69f93220ebb38e004b4a1bfa8880c5b41c9013e71333bc916bde61a77d5" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="fa2b9758ea35a44bf885c0a43326c8baa3f62aa8d19fc4106b5ed365b302dd34" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="699bac6909867f6b9e203aeba4e7085a334e5f4a1b114e39ead797a66106020f" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="2d4af7d3707450580edc4997c324795dfd14749940d3e73d2d942ff24ea2d9e5" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="c2bf8b65831b492372f7a9d18927dcbcb86e56f98adec262d760f5d520ae3228" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="16cc178e545ad4c3ef20270440b123f129b24bb3e6081cb94dc334de08b6f9e3" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="3d852a915d2df205ace7191d1e55fb2609136c49114ec0671daa81a5ab77af81" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="af9e9b3e77b051d9f7d02c8eefb85296ffe36837ac5e442d609c328ebcc23a51" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="ee95af9e6a62d6838f6c58ac92604bdf2a7dfbc3a34e3a892a29e53083140621" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="8f5e05b1452019d0f4c2b53615c50b01ec45c8baa9b42394479587ed0fff568f" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="d003c85957e1c7c28726e4509640f57c87ca1bda9d692b75fc0c68681e61cb09" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="83f5f91c4f7b6026927b240dc7892d31d61acb8a18ce9cbae8018830d5527571" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="ff6e5aa5c82a3108ece80706bcae33a01c840590995f9927ff1ce24791e24060" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="1a47ddb408d85b067b20869022cc6372495e90af4aa734cafc9c8c3c0652f5fa" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="1f69688ad4317a99638ad3f7e5bce6bcbc7bad17bf679aca574af515158d80c2" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="03a740baf6be9cdd086c1ea02fb4df1c07d9cd3fe2fa9d3f1874141917f56eeb" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="c4808e3549c5854e36ee25d0162b38efc0224e40f421ed92ae5e1388c6db2bb7" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="1fd3fcb163c4d0cbfce0c92267f1694575b905de75066644ade375849b053d20" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="2f7826cd12c7bcbb51b1a9d7bbc6ed195489ae632d44cfe63e7a119696083f73" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="134bd475ce0dd34f63dbc024f29a7504139d77fb3c1fa1ef144065d7fd71b31a" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="43ce639bbd1ae2d064329581f60cc48a4da7a0fd010b74d3009bc1ac7d1e30f2" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="684c84d35a930b9070415bf4005f28055455debad5c28b17f9dfc6d9e3865a10" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="0ebb92e6ca3c52025c089490787896cebdd088294b9fc3dfcc6e51a555be1269" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="3ec7ce2d00ac527907744f95dfac556429ab5d1c0ef35101e9bf71e1a50291e0" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="49cc5ee301361b2b1f361263ac372f91c1b617ea788d26369e67dc707ffbcdb2" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="932017b5219653e1250054af6757286add1d06970fc9e2a5261fda70342696de" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="29627423e8191e779a9b80504c07ba6ea7c3759b284189e36d63ef18c13e0a76" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="121681bb2cfb89589a0708104397788851a89bea438dff8135c963ceb575af8d" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="46f185ba583bd99deda0daf103e3838e0b3c49aff6992ade51f173631da77c72" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="3a8e73dfea40a94b16fab1f35c7e75a0393692dc2a1ef0f79ecbc4c9469c82a6" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="bdcdf55d528c996785bad15f75809134cf8ae4e553a68a55321d6f87442d7ad9" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="602604d48bd660ffc65d7613273c663930d72975fa9c8b238c7da9c5dbb37aec" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="1216ccae30afa5246e29c4a8bc31ea3f647a802786edc8343918308e161d6a42" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="a24a626c4dadb4709b725d7cf5773acb3d24f1b3fe79334189702951f1b995e1" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="2826259e5f8931ae10bb112520cd71e8f2ed227ac5f1e0a78b3efd8d5d1624cd" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="3b5b570a2327d9d09c15a51ff773dd641ec4bff7a6873338a54ef4dc543a016e" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="9e35c58441d2d3ab98419da324c88f2d709dd246dfbee2a482d37572bc33bdbb" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="89074fcfab5a4badb0c13a980e13c720708f3f64d02da724513f6572447b0af9" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="b8119f53cd97ccaf00252b7d32cc3061687b3f402b9dac9aa7da11cff440fc24" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="0ea6b175518f099e764052f5d91ea875301bef57fb7e8e47eba43c82cfbc8e04" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="32020f746f41fa4a864e20226d09b2f051f5c91266bc9a7585b6a4999cc07715" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="06ef2bcc7c2f3f586ea1d7f8f124db02f1ae4c52787109f8e76da97cb444a8aa" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="af9435350ff71743d2091dffcc1010853b9f09489974c8d6d382e26ca8f51b17" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="0447c830e304310951ccf64b4c2d705af99e6e275212efe9f63969a59ec2e6a0" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="4ca378790917d75685cf88ff499f4fbaf87b3d66c9d79fc92ec7156343320871" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="cd7923b201b5bb419b5ac79f3a874374ffc6bf7a06ebc9138fd26fe488f3cfb1" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="480efb3dcc03c8ad9106b9268e3f1197c81b0c8d96fe85e18755b17118e33a78" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="40c909e42bec1e0ec6a245f28fe69ee68cbe6e07bbc6c65d0023345212dc8046" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="bb19e02c53317cec7574eca16290568ec384e28f02798eaae4a6106d9dcf38f1" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="d3159e4d5351c67d4e84881655db14a2eaf71f6dc5cb0f7bf2d606a4ddb07161" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="c7449a976f5ab16aa0958be8e750a36b6f769bdc136f34bbd1c10abe903e63c8" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="ea266c0014233b3ee939cf5f16d3822cee6bf282ceb5472f9bf10325e06cd3f2" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="9eab15b25a77efa2d1bf03c68dd93ec81eb8f48dcb74c085292c3d5431f33bc4" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="70a09ad1b1ace978f7d0f07771df0ecf0860354d4ae7c382210f2cfe47f507a2" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="30bb901a78d4084d199d9c8cd5fbf8d93d1d77b20e00ea9b14793caf88d30501" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="dc7d48ff8b47b6c297685bcaf166c8ffef9471736585966b61be93ae23f9b423" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="6f7589d9bdaed747cfffa4873901b3415a54762b71a32c18dbf244d3ed6b45a6" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="7be97ec5ae7edb0e35928866804615fafffdd50ff94906754ff15466c4361c33" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="bae3b69edfa2e965f176dba688d6dc211be32554e9107455218cd7596a6f7c8d" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="89db13f642301c36947eb226d7dce8ffbd2c7e189d0605fe8d41ab2be26ad4a4" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="06fec8845d504694938a418d55b3015b8da74353534409905ef7ba4783d813ff" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="66080c124035f4a7409686a39d93a5505c12214e939ead75afd3c19ead3ff8c7" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="4f0fb3ec64774063a0484ea2136abff48c921117f375acfd8ac77c1503828b6c" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="eeaa1b738f43810a6062da9abc256aae67c5f9e3f4319a283486ed1561457d0a" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="cebf6a5f63d2e75e138a33264355adafc963d9ac0df1769521ca6465b2e8d3f3" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="6464c5610a295da421d25a4eeeadde3196f573490a7e590ff97228c3b38b7cbc" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="01cab37159cee18c601a191ff3892616955cb7ef323504a30ff12364d6728e22" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="9f4e7df3af2b5362ba2b4db71962956c81266c2494a31e35ea682e0ac0e99e93" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="1bd4d4836a37d64af88800c67f166cc830f97bed71445f6feca2deb81198f646" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="c497f78c770e0cd16f3744e6906a430063e45d6fa1c73ee9686bb38f3b909249" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="e3bc5d712ff8a37c289c75cf042c2773b6893ec955b932671db6022fa10bd6f5" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="351c0ec922d24df76ab632e33ad6b87a8d71c068afd2b28cb0a29d12c0ac0be2" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="d9c34306a88fd14f20886cb69a198ba7cc9000e6806ba4ee94a7441fb98cff10" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="ccc24860cb9a6b996bbeb5287dad012daf135e9bc15a1fd7b20da315f81bd07f" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="26aceb34364cc4057bf16901b81fe367e2689d29f04028fb24966b1455369381" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="c8d3fac476352dc0cff29a34935db79dab175a425fd02589d45fbb4eae8a735c" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="f0960204aca25219f959efdd2a9f4f6f4c9f83a8ea9039a9c37bd4c0a9e7aed4" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="09b9842398bbafa6678349f99782040aa7497fe85a46eabcdfb80219b987610e" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="5349c2561c1ca820a9d56a7f1a98c114c047a8d9d98b6fbf1b31be25f25e6368" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="8fdf271dea515abffa0c2eee3baf6075380e5e9d33d442da81b6504726416138" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="630fca3cf84fbb20006c52c7e66d8b7d68f32830ffe9094c6fba679fa5ded800" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="fe949faf4104b015ebdee3ae3a707e5770846b77de216b96f54761e7c2310b23" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="efb8d8b9bdcc2557e4b765bf44d0fda798784602e518a20b11a66eddb7137a3f" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="6e8705bd5b3b01700216b5c17e0e51c2b379000c600d58c2bfccc23888674730" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="262deefc2b62220084c50edfb926203cbe168236d8e0f17abdf99c0f88a764ef" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="d21d4e00c1bad1d024a706049fc96dec6bbfc8f22a3c42bb09e03b9c78c057cd" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="26f39193938480ed70abe3fc24bc665be2b4a6e92ef8f764a54eb1afc25a2240" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="b89c9d74ee018f49e471f8b39b9f87e8ad1fa998a3caf5d62383216f11e4eeaa" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="358a10e372f2b73a83f3faa943cea8c546ed8591c0efea1d51a66f239b65d36f" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="24b69229cfe33b22363588d60f2ea2240cde5daf8b15fbd155ee15febe067a6a" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="81dc7a7c9baea62b6d07e68d5ff5df3e922380951a5b03e5941e0b70aec63e41" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="52dbe75224741f61f45c379a99544f340e7b94b805945ff2e51b3878e152850d" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="2e2b2a24525e2360c8434fe22e8802828e094a03d9d248519f95aa2461e3481d" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="bb3299afc55c8998cf82686e0e904efd312cd450891dddf6155fd3d0fb6be3be" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="0ffaa1592924706f486e7b743a68ce27d45692ec0fa1d9c119dc299bea215202" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="4212cfaa433c409d287ed6c5594c7e4d8070ea361efa96955577d3818ae323ec" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="e5d9d7a020dc953c381cbae31eb404499a7013dbf525346d87407a63b0ad6709" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="58bfd27deaf656d80fdbaf60bcc17bb9f361928ec91f78758f17b6ff92825c3a" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="bcde70239583ba04e2c805d297e8d44f53ebcc3dc3729db800b5d1cea688a21d" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="240b58f124fb98e4559d824e277fff29eea553f0c8e416a0fa2d3c28be162f4d" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="4ec218933c7797643cd087bab2688bd0f253043f916449b3c5bec952c6b9a159" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="3b45eab57c987d35172e0288149ca683325eff448c5647ba87fdc6b02a60db72" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="4867c1e79f0e0fcd43a4da01e2073ac3a9c80b91f7f02352856cf121e1be6ca9" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="f665d69c8c8e6d96ef5145871320c08b914dd1593b740fe836ec494398065006" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="a724b40d659dc2ce806ee96213d74c7e5cd7ccdef0763417c0f5353f03a6a59c" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="1a7c54b4b804298a50d3ee62e74e1ed0a75998c7e4a426c676e881f208c29a17" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="240585bb81b6703d9a4d4f8d90a3388b42e73d62a644caca2c725db83b53e447" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="76ae522b9673ec8ac7078e192704eda37a632937cec8ef6ebcb7a8d4334705ba" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="67364dd8128a712540029047d5088d41f97c1328b64cb3ca5135ceda4d559f68" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="5d3afc2dd6fc0840c6cafd5d3140bbc46b5db89b74c13afa7a914c96ef9c9da8" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="d9caa411aa8a1343b687e1b1ab7eb4737612650a279cc64719c524ee7aef4286" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="e68a4d22c37e77c757a1a7ab5a191442db03bbd3d8802b3ec747ab37053ec723" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="0fe6f61f057b666e71c88e1691a0515f93fd3374ad711372f0446eeab48450b9" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="54381a573fd17f42805fd8cb7ae3a3d23997581a756d32674e7b2bb2b1fecc44" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="252dbf8e60eff2dae43c17343470e8fd1aa5afd4d1b6235c4e561d6ed67a8287" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="ae556491a4604480b6e692d6a74fdfbda663e204760879ec09f5801d1f88bea9" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="6418ce6fbcf736e4294781be0eb0cda6108cdb71db02472daab319bb80111d84" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="37dff5a1e53ffa3376c921141977c957f46a3444784f00527e939245a3355fd1" name="kernel-source" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="6b26def3052ae5cedeedb5c16668bde46ceca6a59b9bef2c74934e1cbbada1ba" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="03daf00de31cb4518d10f10bec297c1432be2118a247fbc8d878f3963c5c4e9d" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="be47f3fc650c5ac99dd83b1be0690aff915cc29b31b63b54431c6d68ef2a24ab" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="d10fc20bed7faadaac78da542cf586caf0e31250629ea9939c9b35a971b423f8" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="a9562664277950af5acd7a6ad2bfc4a5a6e9decd727cc0795734a159d9a95689" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="73322e9224c80b86e56e9bc2b07897808b4cfb21b5b92cbcf4ea82cf0e0d65aa" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="f27efdced869577e1b06d592b3e2ffe5ec80e3ccbbf60b45ef755f15063942cc" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="6d06cdb020ad2f4f15c8a5649669f6df94eed0e3b577ff0a05a09580f88da9e5" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="544943b6e66c96cd04db57226a9d63fb5ed60f555048e32f9f11cfe7321e222f" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="1ec474f581d8f26502b34892c6504a6f1908d46c357c926fb1a943b07230c21c" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="c100a05098790b5aeba1cad85fd5f9c5cf095a313c8f75cf4bc83571ea3ca759" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="07fc2f2647bee185956da479d9e9446916a8c7aba3c584199ab42d98ef2f800a" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="a6d3deae1acfe8f1b16552e0d4c04089c06c8ce147806fe69973c7b74b233255" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="49b135eca8c7dce5f70384d2ab963ef10d12ecc4f3297366f56adb75948e5170" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="385c99fda387c2c261cbd1a2565890e9e962042d0110124d2081449dbe35be9b" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="c5b73720c72dc4a3529f1696fc41f849fe3d3634c37a806648372444da8d6c7b" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="8063f01ebe8fd2c27441966e0b5950359d5db4aee88d89cb9706c2a3d257bb7d" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="075d9cbc594343d6305d16d2c82605531cc618b10925de6468109bedbe73f715" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="cdf5ca2a8d35d9db0282c10e88bb6ad99fa634380e9177517b513fbd8afe3f2e" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="9fe5e207394fc3bdfa0f85bbfade1e76932e047fc0e6cce0e8c37a79c5b97d87" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="0836c2ae28881d82ef417247c65a3f077ae96154d85330821d3201a09742f87f" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="a933c016b5ce6494471136ef9b155750b7cb119f53132ad5e31ed54fa21a9408" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="afe4883dda27d44feae4f51b5b41ee93dcd3d1cdf1c4992fddaa068136352845" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="fbdd93d15c72dc00aec5ced814869d83c62c270c9d700b1e0fa9fb781833b6e0" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="6cf7402c348147e9b9cbf4b489e453e109032a0f2f00fc4846413d50a3707ffb" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="42b1bfc6d9deb16ce577fb771bfade3672126f8321da0b7eb47126efabbca706" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="ad030e9d640a39f8067e40690af5120f8a61cc6068bd26d3f3ddf9eb2050946f" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="6e04920f0fd1c4b4a9b1ee36f0dbb765416ffdcdc16a74bc0950aad1853282f5" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="85221d941f723ac475ffbf0860748ced0ee815bc7be3b038a2723baa9fb821ec" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="d8f2274479f567fd76102289bb885c81aca9e471170d3b88acbbb516afbd2acb" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="ca8be02ce008d6295336341140647c2503f9845e577de6f53a47c6b6ed889668" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="a2c8ed202a8dafa428bc8adf9ae48a274c207b324d2c0f2e2c7ba3255181cf7a" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="972f949c0c93d9509c412847d3b802e7c1974ce5da697a6baf78dc459a0ee5fe" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="9ef00c9bf847258a235c37777d5e7cfd1ac1ca25c795420a50dfc673c8149b2b" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="8159eff997f30723d1f19e6b4d0e672548f595a9c47ffa892a4d7b7503f8c3d2" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="53b34dbe54fa26bc45d9419c25c4abfd977b6326328b8fb1bc579bc25569ef2b" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="7e3bbd394f663ec15d978bfef4be866970e3e0a79eb4102109f632e40f7c1bb9" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="e126284a506275b4e997193156b486fbd5cb7167df318862f7dfa41ed506f345" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="657d9ed12d6e0e8f40e779af06b6b0382a143529cac66f7605da472090166f83" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="ab4843965cc62bead72b693f9e50434cd1a60c04f20846493cf3bd57c4b0b7f8" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="b9485da4a2424a79d31e0d25080084b10f5d9671bdfeac144127760b2734fae8" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="0821d44a830e9a525a8c5231271ce9a4ef6370da2f15d5214795f67aa684f300" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="e959ab793d801dea3296cfc8bbe82cc46c026229763c579c139d6f678eb58bc1" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="290d93950ccc8bb261331bdd4978ad1364875f25e5a6696ff5acc596488432d3" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="8d637c83b64374da606a6749630eb456eb902629a7d2e44abc62a640590f9eff" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="99254f9bf40a2fe7419541fde85e67a56a073e360ab11fa6b588c87f499f0b8b" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="ccdf1159fa829ab0679f46e2807766f8947bd1d1f2a35f08cf8e16b75913f265" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="41ce7613e45d8db4867be97c4a024cc898b730d4763f4aa19325ac376729daff" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="598152c45229f338cff33f5668b5f8af46584427470e946a877ca157f8299482" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="e4cc008fda46586ea166ac737b9686b8d7738d465daecd4319883dc0741db94d" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="7d36b2a00d00a307873b10c4b84ffac7c809f8eb1cd68bff4a3021cc62d21d7b" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="996cc275b8246f5132f18437f159a9774841ec71e37a60c1823b7c53bf969fdf" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="0ff3ccc73df5fcb0af0eb72f39ef8f637a08b39b8f943d8adc5d99f374b55443" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="7232bbdfd44fab64f63383e7a56acc8fbd04eb445f1ead020af8cbec64c804f7" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="5547989add689e3a442423073ae35b1ce59165e3d908920ab78ee505a8cbf3c4" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="593908ceeced9ceedbc878ee74870135ab6c85b40a315ce4c28cb9f3e7de86e4" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="d34dbd4095e0bc59dec3ef69e384ff979646af448e74ca823380701e4f6b108a" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="e5ae3851fc2aa25dd995ee1d54bdf6b58eb76d69e4053f888e92770a6895e49b" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="42fe4175754dd99a349ea603e6295d91000db14e894f6ab8fef626771c3d932a" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="0bdd9ca907b139623b120ffc8de8e7330f898cd50fbba2629fd99fae859996dc" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="844dbae603d54de6f3a264c3e1819e70d25c89047944f47846d23e004f175b5c" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="4d0d603c1ecc303331cf21a65d89f5481fa246fca36aa3b80772f913c887c6a7" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="8f0220780d391f0774ab9b92e0baa67bf3d11a576c5e22815d5f10eeaf97d627" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="e82e98062dfff9eb3097d7902a637cd550f2e19ffc76c5d77ae199d6398ec040" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="2a5d187861b977561639fc7e3e1b1da649b02a3bfc5678c748b34e0a42806358" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="2dcebe96c54e57d74791e0d8ce3d4a1e6335db9bd3e39d4526b106d1bf67eb83" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="a8909fdcfa747a0939b0a7d39416e5bb2a95cf5a9bd4a3ee5d46c70bb86f6c72" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="a29131be3e9765d24756c3466d220fbdbfea12178f1182eaedd2bd6dd2acd677" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="be513cd80fb0f095d2f6acdff66e8cd954baab1c8b470ed15deea2fc6b429f1d" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="6205021f797d4880ca71828ab2bb096d061a1d038789437e8664429cda76e254" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="b24cf75a03ad8c4fa6caa2224f2e07f6897d29f0fa8eafa25bd5a56d8a12b014" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="5edd57b05591fc127904aa5c5b1f4a9d4fbe17ef4b2eeeb857a06b41f4c6318d" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="634cb61e0f3bfc1a20fb526c61a29b65e8b995750db02ac5c946fe9d23bdb995" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="716dbf934b3acb3997e5fb1d838338461d9e2a8030ce9292b4d67bb48643330c" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="741c9206458432ae2106b977630831d50af69be9e55fcc5b307d81535f26028e" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="e34cead464e16f61c7bc9316619c6fbb6f5f3dd64f0f44324f0601f2c435fa50" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="8254f73e9628083903f85b02a6eb7e59750ba257dc2a3004f0b1a8be630c06f9" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="136d69eb5ac964f07433daabf53dad8b78f4c64584437d65950e3ae9f688e4e5" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="fff1cc9b110e6b2f39e512c5782d37be92dd698cd69512ac878c0fe16b19357a" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="4b79b2e2c3c6af8931457dd7f17ce2f13a49a27af9d034b7d6d2cd1dbc236aa0" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="88f6e034db5e01a39e50222a627bd428d24def2252b0794173cd724448d21134" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="79d4ce2415763170c4bb65190156a135f3018e7492f1a0e7709339409f8613c5" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="16d6da570473240a081c5f677f7ab0395be6915bcedb9ed088bbb461681072f1" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="7389f675a6c9ad7cdebed4b9b6ef331cc7bd9eef2ead467358099b65423da5d5" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="827efc7e56eda62eb5595c50c9dc3070e1436c3bf47f3bfb4f8b271c2f15d360" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="8d51cb6e40d170a8ad3b77b781251ce9d6c05f8c7ec9a390c4beda6e012f4115" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="d5c18e100f2d2e827a70cf1bcc2522a7457bfa5a5ce1ca9e6d897ad5f47333f5" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="23438242717f1c411e3744e4d6c3a1a51a7a876762b0c40319d07a2690b98c5d" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="5d895e5da3dd40a6cd5901b8dd93c6a678425a0e7988f77f144ac9ce117361b4" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="ef6530af0912a165ae0c96ac623969f2b30b845d1e457b0315fb581b41b9741d" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="99557676d34297ae4f17d5cd7859066f540a66b8acb4cb3afb335e436fa2bded" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="acaa1634d8928bf5056c4118553ddc1888e9bb6fe4385f21a81df240f6c66d76" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="a066c448db2e0020cf2d15a2abef57bda7fe29c018c3fbd0c6613dce9e866f2a" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="3e2982858e8a5f2039f011df9c14c3a51b7d3e6288b153a1f2aaf8ad72dd4d29" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="83ed1c31f3feb91eb4f3cff56816b2195262949cc37ad7f964a416f84cf32379" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="d249b80365f28429e04fa6c179f2144c90df9b65e4de913af36370f50bbadd2e" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="27a8164c53ae595c62b56a704c4736315db2c9781c11d5e23dcb2649b247146a" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="0a81cafa28972fc4eb9e2f7c06402450c5e0d8e6034641b1054170da9fb27b76" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="a196189e18742ad48c08dfc4e49c257ef5e15fee839fb468679e4458a1bad2f7" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="a7eb6fdde9dc31fd3a9b80b0479972a556def5bd3b3bb7104e3f6e9ad74bcf38" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="f73393050fbb597fd601f80a76ca6783c760396885b86e26230df8c925ffc8a6" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="898989895eab8a25d1bcf63438e187596636f5447c7e55c7f79c3e313a942da8" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="3f736c769aac5a22bb0feb20b7671df8e11ca6c79abac575cbd81d8cb834df72" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="85d0a77fcde83bfdebcea9b025a49e5d3c5d15870b08ca8ffc7de807e54f8e04" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="1c919a765c9bcdea3869be9c3bde414def246dbaa03822223d977c0e6bf50c09" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="e559505bf6bfa209b39adc8746686e39785723fcb6ac0a6925459e9d4cc18699" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="2f34fccce7499766f92ca48b61f9aea33e8f18c8a79aa2351df1dc5345875177" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="5eba0665d45d05a75e12fbf078d516a764c690794f0d8c9854be3f232915f243" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="9d5a1e63f25182ba097622c8f66aadc04f7c9855458b5c137344e3a3a55f4071" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="d3299502365dd8a4e0e7ff2029efec66cc29aa39e68fd1b107c9acd5f634363e" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="0d0cd46daf5624a93d62fb0113c5a0f4a5ababbc255dc2ad7fb354cf8e9e02e6" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="412dee478ad912583a3d3bc698c0f6eb8127ed2ed412c5751633b3e24d54cc96" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="7869a6b792618a7a126b01ea5e18f6d4aa1b3be8b959d93ac61e54cf71ff3c04" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="4e704ad9f794d78842108dc900df396e1d85bdf5d5288f5aa5033c32c4713703" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="2e53560e8cda9fb6522a6b1a157610aeac130dd867d7379c2c4ba675d200b486" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="6268b9ed9f1cdc7eac5900b8c4f3bd836cbaac07f8246e4a5a6131877a04b344" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="0324541cc74df480dd5f400da8a82afeb680c992881d067a89597c752008991a" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="ba8dd0cb32798c8e239a4aa27e34ee8b0abeaa7f98e31e1bc43766b89c510731" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="74c1db568bc1ac4033088a5320332fa1a7c407e8883cb262f30648ffa30a78f3" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="8d465f118afb1e8cd04d9038a75d3b816f97dabb351c1102e6fdf618a759c0dc" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="d55ecb1042c35ba77d9af011c5ffb2ae6cfe0e8b88c833e5516b2bb88bbfbf81" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="a082e65be6fc2e0f8a8cc5d2d496ff979760fc1fda2c879acde2c2fb5d547a4d" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="029a3a086fa005b2bf8d50a28463c931e4768d59664e1feea3ef396c7bf88768" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="cddfae46a1788778269f048808bbe553fd84ac5b42d3dc83853851550de5f6f5" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="4143875504400c582b8db62e1b920e01ff654336f75cd97904d147ff29058279" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="48bb10ae1536e387277cb2508cd375c80d54b1e206dca2c7edbf76aa840292f2" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="e46580f8a7e856a25d5165e4efd02e6c5604f848a1eb06b24c4b781d3fee4b29" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="3aaf83056f5e1852354b284ca8240e69bb547c42aeb69fc330d8d1102b5f6c6d" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="065ff9e6f171d77415b36ec78d63e2fd75d2beed3684113cf721764cef1c24d1" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="d843a425b2ffcedfc36b6ff68ded590313774617c530494a39240b4198127aad" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="efdcf793802ac3442303cf053511eab9324b0d4ce87702f9621762471969fc2e" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="1ece3c6f6af1bac2925f911cb0d3be78752d72f802b51bb361dcce17843a6640" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="a996d9c2eda8af59c26d53e3c7f698d651fe354d6b537ee43ba2398648dbed70" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="95b7abe50f373f6d0749153befde1e27d21bed669997a27e1636cad28d50172b" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="c68780d4840864cfac59ad30beddc6edefff82edde295f1a09bf79afc2fd47f0" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="605c67f1eccedf6fbd4114db35f0e07d941ec206da0314d471f335f8e42bb056" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="6c454a89760bb2f81027505fb491bc2e2b592b00a8e5164bae54203b98f47ae1" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="9a794ba1a00f5617e76066ebfc9910278af93969a6893ffee77b293b08a40389" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="ee1e7edcb99c60dbbc48ab8e1f2129dd4bd4ee92a4e31829a10189eee7a6643b" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="aaf3fd7cce05863c8db703c576f2f6960ef599ed2aa74d6e0a450308b682fdb5" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="9a315a613b4c5c82b2b651113575c17ee25239fe6b8b0e0f166624f64ed79a59" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="6cba86ab06339868b480d12f22f18f66fa0b4dd18d36e4fdf302dfa1c2a9a8a6" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="7bf0137138392744f15e2285662ead5a7f44eab8745cc6f4a838de08c65c8dc3" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="20b242f2609c46188db2196aee3c4331d609e6048569218fde4a404e9ba5de37" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="6fa0bab3d046f40e6b8922158ca9c2f8dd41d5a8a51076536b9d870c88af1e18" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="433ca6894bcbade33530c0cf175a608d10175c00d5afd345cea87c199d5dd972" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="e7041a70031f9a338de0e82e5f17dd7135e929b61f3e3ff56369326dc98f4a17" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="e3423f50acf62b51f1508bbb8854752055f10d2557ffdfade77dbce88ad91e41" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="ea0408983dd92513164564ff0b34f491fcfed2f9e22f1fd6a9c784f0d886cf0b" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="b4bd228ae56a60ee648fa09d62cbb10395038843803233d89229a9ed942c5505" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="4686fa219482281fdf0e1ad8bbcd7ef5f98e932291e39011ea236ab5c7f04c6c" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="6fe394e92d6f421f7ddab44838e15ce3143d3da0ed619e33767ed19369e62e09" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="d3924d6adf41043b156ffce800b92d88d9a9188b2941b7c175e6bfca938c1b1c" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="8c1522e3edb9779bb07a6804915546e26d614c8e3d1dd570ee4ba45c1634d4d3" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="1329a2484d5b2c925afec0941b095e209c180e17b1463ba6986baa4aef098cd9" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="25ff48296aed5c5ed12c1a0e91a4ef837778f5d8935e7858d8e0aa20173df729" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="42589f6a3cea2dbcad5b0dc5169b3138cde8e9fe03448fc2a441c4bd2d1eceec" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="bd1ab58d7a2743868e53a39111882ee108ca460e4acc6e92e8ba561697040ca0" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="698b22d035d6f32daef5c5ee4fcdaa42c1fe82a9010493585931caf74b90399f" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="eaf024b4b11dc0eeebcc16db1ee2a4946845dd7ad3ed18a43d133380afefe85d" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="8f9dc14421791c3159bf22a3d0cafce7a2324a3704dd5c7dabcf6ce7442043b4" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="17ae0a7a9e10f19ac5c3229710493b327f9ede0310e4b702b9690d73e289d313" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="1bfc1ac3b08d240b6823e0b049dd3d88e2549e1a2fc6159c217e81e25bdfa74a" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="5e007baa3921f9983ca5e102c268385a6eb5adc13dd6cb3af1e9e39c000ee869" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="a938d536884b5c5e0803d977785f0c1096c55eef32132d19371701c899978152" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="1eff1dfeb0962e6adfef8b086a0a516ea6287cb65942760fc56ffcf99652e28a" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="37323d1dbb26db069c862d9f46ac20c03d183973c842d69dea021005ad76fcb7" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="6cd0891e309744a5f0392e7954190e14d167cb16c6d51739f45dcb8a3213d851" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="6fce860278b62a92ccbb706083c4741d5a1fd756f4c0e5800245ee7225075efc" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="f6598dd3b8e9362c5903eb9929445cc198fe2c1d4ed777d48b6d2d1a711c2938" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="2877e0bbf94b164d75a7e471422693e883021686707aba28a2514a0d29455eee" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="18af985b5498f8e1268f53a211bc6d3a63319abab7d072b94918f69fd57c3e0b" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="440a92f550cbb2193d4e8e8034cd8976f0482305ae62668f634e2d5d830064ed" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="8274a60ff65c04fbb8c884f172a8dfdc2a00e2cb8b0923284c41c30df183f8ce" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="fb8f4303efe81c47ab4312998c41e80edaf8f6e39998b9039ae8636394f0c50d" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="224250aec21cee432f3b44f4a8b78e415a2ac3d68411cf86f3fd478b1ca433cf" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="60ae37844885cc0c2ffacbaf28a417a0f87fc62b98f216a74f9dd80bac2e2335" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="8ab479c281920e19e455110622a7ad6a312e6a98ae64f815b4607d5bc1c83ec7" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="dd514db4c7164505d07535516f6fc2e9dce700673538d14a12523568c5468414" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="00ab34e52327b3cef87f05611f0668a13a5e97b93ff8b5d1a6775b5b08457190" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="cd8530ffdebe47836a532863e27eecd2b235aafe34cc494983c99c25186ec3e2" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="9e26e1d33fef1b8695c5b3ca104406a54654bf2a031055643b6a2ace66915689" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="4f8ed95202a143a53ca6b7cb3a6d097c80c159db524740e0e251fe00f71de25f" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="420019bb6bd96d210726c3d1212f1444780d2054760f5ed2f35f0086ff958358" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="588612f1253ffcef2cf929bcbca8a70984696fc37dd000584e57e7d9e3b57e95" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="15a2b906c42f8afb0d3de1170b6bdf0555bad0645664fcd00882e56ed041d1b8" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="3104c1221736a315ba6397327ae4b7f945a2c12195c45c409ac4867635496466" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="4f534fa4a5cb6bb1f1875fd33faccab71484d3400ac9434d8aeedac49dc0502e" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="66ae9d3dc90db84b357874e76224685242142f241730389276850cd21862ab36" name="kernel-tools-devel" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="11aa626384b9e3b01d57c9287192785c12b889a46a072942f9a80eec3ec57e85" name="krb5" arch="x86_64">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="676e7337be39c3829e747a099da4c425cad32517144370c9124c2680063ea9f8" name="krb5-client" arch="x86_64">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="a21a22919a7c8b3298007ca3289da9dc48f3ee56efbbd0a4906320a0721cc180" name="krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="881ab2571b4aa90ae412a8f9599fc1c59609479bc9eb26270d80cc65893ea1c1" name="krb5-debugsource" arch="x86_64">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="d24c36b6a3523d64b8f341a8287ef992eb263d5bf996bea212cf2998e16e589e" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="31daa60e08485d0fa3a7dd2bf22124f139636036ba774b0b6e17a4c2656a6ab3" name="krb5-help" arch="noarch">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="887221aa434b660057ddacf50df226290f26caf9d3b1dcb1aa0c648ec0e27100" name="krb5-libs" arch="x86_64">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="1ef0cde46c6744af65fb32d64e93193dad6da51fc8cfe6d34ef495c3349c0e0f" name="krb5-server" arch="x86_64">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="68846d55f9d8c480ee4ed18508d9869073c4664c53d338efad6913992df9cd42" name="kronosnet-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="e736b80655f1c18370a90a616571d078aa378750fba1544054330cd57aa232b5" name="kronosnet-debugsource" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="7136ecb106c7f59226e372647249df1aeb61067517aa4a40f2741f7b587769b5" name="lcr" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="10.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.0.9-9" date="1706875200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add ppc64le support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-10" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="e4452c963a02e86a31588636af556b19ff389fa0474167142776b8109d63f6fe" name="lcr" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="7.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.8-8" date="1667908800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
</package>
<package pkgid="d74de4d8b5e69dcbce9dc5d12753eb1b9a89d99e46e55186e971057d741bed03" name="lcr" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="8.oe2203sp1"/>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="0aa94a27597be62714807aab53ab1486cb5b3e74987e5c001622f874c56189db" name="lcr-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="10.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.0.9-9" date="1706875200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add ppc64le support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-10" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="23ab96c05a52501e9b0c26a7e00962df7fd613f168625557de2f1ba432c3c6db" name="lcr-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="7.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.8-8" date="1667908800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
</package>
<package pkgid="8e3891ae8fff11c15762720d596a361d90e3b8eaf4846db7d62effa3449ddeaf" name="lcr-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="8.oe2203sp1"/>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="56d08317abb87588d465cc499a21424dbdfe2a6952a0a66bdd8cff234908401a" name="lcr-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="10.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.0.9-9" date="1706875200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add ppc64le support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-10" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="fff9f86ddf4fdd240d70aeef6df3de9338d31a97ea92ef6020b226245e04be87" name="lcr-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="7.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.8-8" date="1667908800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
</package>
<package pkgid="63f60906b74155b8efce802c27cbdf920b5c3ae9077b34f7475f5760df20b11f" name="lcr-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="8.oe2203sp1"/>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="9a4999dc9263fb6dc42392dbea538d140ac75f7ad867e41f1044de99fbab0990" name="lcr-devel" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="10.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.0.9-9" date="1706875200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add ppc64le support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-10" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="611953fbea1d51b961c1535cbcd0a1fd034a0ec222567801c6c6d2e7400481d0" name="lcr-devel" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="7.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.8-8" date="1667908800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
</package>
<package pkgid="c3229306ee8b247cbac86156cbb96f38249804822d57de06d3b621556b24c38b" name="lcr-devel" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="8.oe2203sp1"/>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="2a8652031f78387eb056beae85eaa6c37e2ab19a986002c99adcf8ce91434dd9" name="less" arch="x86_64">
  <version epoch="0" ver="590" rel="4.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 563-2" date="1622203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
       Create only one ifile when a file is opened under different names.
       Remove extraneous frees, associated with removed call to lrealpath.
       Fix crash when call set_ifilename with a pointer to the name that is
       Remove unnecessary call to pshift in pappend.
       Reset horizontal shift when opening a new file.
       Protect from buffer overrun.
       Make histpattern return negative value to indicate error.
       Lesskey: don't translate ctrl-K in an EXTRA string.
       Ignore SIGTSTP in secure mode.
       Fix "Tag not found" error while looking for a tag's location
       Fix minor memory leak with input preprocessor.</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 563-3" date="1627646400">- DESC: delete -S git from autosetup, and delete BuildRequires git</changelog>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 590-1" date="1639483200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update less to 590</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
</package>
<package pkgid="1d1fca010cc0d630d64ec69e7ac560000aee07550b06933ab79a5c1cde99710c" name="less" arch="x86_64">
  <version epoch="0" ver="590" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
</package>
<package pkgid="79094a56c521536906df110e38eec489a91d8cf3c1cc591693dbde93c084e6c7" name="less" arch="x86_64">
  <version epoch="0" ver="590" rel="6.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 590-6" date="1713787200">- fix CVE-2024-32487</changelog>
</package>
<package pkgid="59792879a126106da2caef520b7d743f5a1bdb21b7c09fce0a92c05a81b29967" name="less-debuginfo" arch="x86_64">
  <version epoch="0" ver="590" rel="4.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 563-2" date="1622203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
       Create only one ifile when a file is opened under different names.
       Remove extraneous frees, associated with removed call to lrealpath.
       Fix crash when call set_ifilename with a pointer to the name that is
       Remove unnecessary call to pshift in pappend.
       Reset horizontal shift when opening a new file.
       Protect from buffer overrun.
       Make histpattern return negative value to indicate error.
       Lesskey: don't translate ctrl-K in an EXTRA string.
       Ignore SIGTSTP in secure mode.
       Fix "Tag not found" error while looking for a tag's location
       Fix minor memory leak with input preprocessor.</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 563-3" date="1627646400">- DESC: delete -S git from autosetup, and delete BuildRequires git</changelog>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 590-1" date="1639483200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update less to 590</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
</package>
<package pkgid="d8b35b16efddbd0eb0150a812718297976455e307f2a30b68fa8152dd4fadf4e" name="less-debuginfo" arch="x86_64">
  <version epoch="0" ver="590" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
</package>
<package pkgid="74c99b5acf59698e45c8b18d3179eda465afa01ad9f5ad8bbd2b3c5abb9cb535" name="less-debuginfo" arch="x86_64">
  <version epoch="0" ver="590" rel="6.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 590-6" date="1713787200">- fix CVE-2024-32487</changelog>
</package>
<package pkgid="2a3a0845bf9c5b4124fd62d7d5597896dbf89c07dcac03aca0d5ab41758084d9" name="less-debugsource" arch="x86_64">
  <version epoch="0" ver="590" rel="4.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 563-2" date="1622203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
       Create only one ifile when a file is opened under different names.
       Remove extraneous frees, associated with removed call to lrealpath.
       Fix crash when call set_ifilename with a pointer to the name that is
       Remove unnecessary call to pshift in pappend.
       Reset horizontal shift when opening a new file.
       Protect from buffer overrun.
       Make histpattern return negative value to indicate error.
       Lesskey: don't translate ctrl-K in an EXTRA string.
       Ignore SIGTSTP in secure mode.
       Fix "Tag not found" error while looking for a tag's location
       Fix minor memory leak with input preprocessor.</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 563-3" date="1627646400">- DESC: delete -S git from autosetup, and delete BuildRequires git</changelog>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 590-1" date="1639483200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update less to 590</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
</package>
<package pkgid="2b10a683519505dad51eac7acdce91d906c13a97111829a0b3593fed0d5460f0" name="less-debugsource" arch="x86_64">
  <version epoch="0" ver="590" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
</package>
<package pkgid="67d2f6d13ed86e66a0b682be4cbb6a4801e1ea1e4e88336c02eae0938d16c0a2" name="less-debugsource" arch="x86_64">
  <version epoch="0" ver="590" rel="6.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 590-6" date="1713787200">- fix CVE-2024-32487</changelog>
</package>
<package pkgid="b6ac2dc6eb2843077249d45572f3710bf93ec99eb75050c03f6427e565af28fd" name="less-help" arch="noarch">
  <version epoch="0" ver="590" rel="4.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 563-2" date="1622203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
       Create only one ifile when a file is opened under different names.
       Remove extraneous frees, associated with removed call to lrealpath.
       Fix crash when call set_ifilename with a pointer to the name that is
       Remove unnecessary call to pshift in pappend.
       Reset horizontal shift when opening a new file.
       Protect from buffer overrun.
       Make histpattern return negative value to indicate error.
       Lesskey: don't translate ctrl-K in an EXTRA string.
       Ignore SIGTSTP in secure mode.
       Fix "Tag not found" error while looking for a tag's location
       Fix minor memory leak with input preprocessor.</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 563-3" date="1627646400">- DESC: delete -S git from autosetup, and delete BuildRequires git</changelog>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 590-1" date="1639483200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update less to 590</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
</package>
<package pkgid="e6595fffed702bd22facfdcfc2f1fee6e2b174e646782c733b3a2126eb7f26b9" name="less-help" arch="noarch">
  <version epoch="0" ver="590" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
</package>
<package pkgid="beca9699ee6af081af856afea15640db86b6cd06db498eabbf70850249db8f13" name="less-help" arch="noarch">
  <version epoch="0" ver="590" rel="6.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 590-6" date="1713787200">- fix CVE-2024-32487</changelog>
</package>
<package pkgid="eabb6b652a27d43e77b488306b3371c53ab2c417603029dbd46c632600c7bbdd" name="libX11" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="6.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
</package>
<package pkgid="849b711911267a1c7135106b16c9768b79f21287d236f764d8f25f1132d29f7b" name="libX11" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="8.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.2-8" date="1696420800">- Fix CVE-2023-43785, CVE-2023-43786, CVE-2023-43787
- Merge sw64 patch</changelog>
</package>
<package pkgid="d8a1bd81b9817f6566b5606b67965efa9d7a8a3445413e0c0c1a681a4f6b450a" name="libX11-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="6.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
</package>
<package pkgid="1df90d8576a813ce16b7ea8c270f4f5c0710d8abb0286b077570f424cb7039d1" name="libX11-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="8.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.2-8" date="1696420800">- Fix CVE-2023-43785, CVE-2023-43786, CVE-2023-43787
- Merge sw64 patch</changelog>
</package>
<package pkgid="df6c3800d1e8de9dfd42fdb2da790d740ed1a84452692b6339fca18f97862af8" name="libX11-debugsource" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="6.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
</package>
<package pkgid="430b1221a0158ddf868e7d892997580f9fa3fb3d1c3a39dcdc8bfbb822a32aaa" name="libX11-debugsource" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="8.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.2-8" date="1696420800">- Fix CVE-2023-43785, CVE-2023-43786, CVE-2023-43787
- Merge sw64 patch</changelog>
</package>
<package pkgid="1a7ca160ae6d5d39370bdda97d5eba12bedccaa1d0866a6f922f813a297749c0" name="libX11-devel" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="6.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
</package>
<package pkgid="2f1af768e5e0ddfc29a482ab1c144185ed2eb1ddfaa4d9724424bc2e693b4b81" name="libX11-devel" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="8.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.2-8" date="1696420800">- Fix CVE-2023-43785, CVE-2023-43786, CVE-2023-43787
- Merge sw64 patch</changelog>
</package>
<package pkgid="7f4d1dcdd8fc83ea0bfa2ae86624ebca4a4e9543510d043268804193ceff2ae2" name="libX11-help" arch="noarch">
  <version epoch="0" ver="1.7.2" rel="6.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
</package>
<package pkgid="bfbd26b4a7bc46dcc05e8fc97cf83c475f8066d916e8859a7a2f9ed4d3ef1975" name="libX11-help" arch="noarch">
  <version epoch="0" ver="1.7.2" rel="8.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.2-8" date="1696420800">- Fix CVE-2023-43785, CVE-2023-43786, CVE-2023-43787
- Merge sw64 patch</changelog>
</package>
<package pkgid="b17312690f9e8847cd1169b3a12103d8a255b856c4fbaed696ae42ec19c6a531" name="libXpm" arch="x86_64">
  <version epoch="0" ver="3.5.13" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
</package>
<package pkgid="803cb653f18467b5e53ad79aae7fc157e692e834c56acf70c11e65f01376438d" name="libXpm" arch="x86_64">
  <version epoch="0" ver="3.5.13" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.5.13-5" date="1696420800">- Add patches harden CVE-2023-43786, CVE-2023-43787
- Fix CVE-2023-43788, CVE-2023-43789</changelog>
</package>
<package pkgid="ee7255179a0988ea72fefdc3f9b1f53154a3a58d070fc1d013a45563370f9f36" name="libXpm-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.13" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
</package>
<package pkgid="9ca231b560c6cfe81547d9b2ac000620bf3a2e37cdf9d25de0576d20838926fc" name="libXpm-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.13" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.5.13-5" date="1696420800">- Add patches harden CVE-2023-43786, CVE-2023-43787
- Fix CVE-2023-43788, CVE-2023-43789</changelog>
</package>
<package pkgid="36bfab45507522d0d803a3650d41355f30cb4b5e76f75fc776f8133d3de3106a" name="libXpm-debugsource" arch="x86_64">
  <version epoch="0" ver="3.5.13" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
</package>
<package pkgid="dc377e648073a24b5c7fdf5fae0808714cdfbb50a585087e844609f1fd690521" name="libXpm-debugsource" arch="x86_64">
  <version epoch="0" ver="3.5.13" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.5.13-5" date="1696420800">- Add patches harden CVE-2023-43786, CVE-2023-43787
- Fix CVE-2023-43788, CVE-2023-43789</changelog>
</package>
<package pkgid="970324246b5969c4a08bafa026db861a00abfc29cceebbd6c7c7fd8a3ef66306" name="libXpm-devel" arch="x86_64">
  <version epoch="0" ver="3.5.13" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
</package>
<package pkgid="39c41036395e857eb61e467299ecce00c38785bbd2f90dd3d666f9fbf4e0a7c2" name="libXpm-devel" arch="x86_64">
  <version epoch="0" ver="3.5.13" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.5.13-5" date="1696420800">- Add patches harden CVE-2023-43786, CVE-2023-43787
- Fix CVE-2023-43788, CVE-2023-43789</changelog>
</package>
<package pkgid="b907223e6020e145fd528510c43177e7d41a7f208f8b72887ab9ab5e0883e1be" name="libXpm-help" arch="noarch">
  <version epoch="0" ver="3.5.13" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
</package>
<package pkgid="3742fdccc1162ed77549056d24261208cdaf856ae815afa15d88aa5e8d471a3f" name="libXpm-help" arch="noarch">
  <version epoch="0" ver="3.5.13" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.5.13-5" date="1696420800">- Add patches harden CVE-2023-43786, CVE-2023-43787
- Fix CVE-2023-43788, CVE-2023-43789</changelog>
</package>
<package pkgid="5cf5a8cf3067fa4dc75ad8579522690a8c825d20e18d56f4837f153626f0cbf2" name="libXxf86vm" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-1" date="1667476800">- update 1.1.5</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-2" date="1677326400">- disable static library</changelog>
</package>
<package pkgid="ec8338670376da8069812ef0cded7ab40046399ce502e6c1916139eeb65368c9" name="libXxf86vm-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-1" date="1667476800">- update 1.1.5</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-2" date="1677326400">- disable static library</changelog>
</package>
<package pkgid="817c81afa13cc80ff0b87f755093f54a3f065bbf5d3e5e84d38f9ba3952463e7" name="libXxf86vm-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-1" date="1667476800">- update 1.1.5</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-2" date="1677326400">- disable static library</changelog>
</package>
<package pkgid="b42eeed3d9e432761ef750a145ec1abf33cbc0ad081892cc97453efb0c94a188" name="libXxf86vm-devel" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-1" date="1667476800">- update 1.1.5</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-2" date="1677326400">- disable static library</changelog>
</package>
<package pkgid="13edbf058e8ef3b50bbe7b2d1c36d0abda475f68a378a34ef1eab7067de761d6" name="libXxf86vm-help" arch="noarch">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-1" date="1667476800">- update 1.1.5</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-2" date="1677326400">- disable static library</changelog>
</package>
<package pkgid="9bb6e85505645165f186b7d69a73baaa6158e8749735a26114450b10500e8264" name="libarchive" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="de6332d07045b03c2f916088e91cfe902b4029ab02eeb6e694a5f2fc207ec55b" name="libarchive" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="152177f45bb4b0f7648567f953f1bed9a0f22b7fe08271293012989a0d6be91d" name="libarchive-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="b4537cb0212ded1bebea150704cbe6760047f8bed63b47ada525936a30e021a3" name="libarchive-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="7c85229d9ef961e51c0737821813ef1c45c3406430dc6058e4748da484aec475" name="libarchive-debugsource" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="e37f3cdd7cdd3a0ac7707e071a71c891597a75b7ad099c8b9e8159401d7ee0e9" name="libarchive-debugsource" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="1c449bcb445b9219a7acddcc1a3fd44aae2de79f7d4938d5851c8cae20713658" name="libarchive-devel" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="5d9eaf5748dc89b97c7e3ef4a14b7e4579f3556bc756cb3ff1291c2aecb727f5" name="libarchive-devel" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="2246e7d2ae1a271ea5874b4832716bf31a14b39ccafc15a1119ef300efe5a64c" name="libarchive-help" arch="noarch">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="ccfba913a5c00b9bff1f3804f3f95c63f457ede38ca25c24f27dc6a5bbd44aec" name="libarchive-help" arch="noarch">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="89bd9c7a52729b4a6f10af8ebe7b4940fce4d5e0c061f1adca1dcd3aea3fcdd9" name="libasan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="694bf5ebf669159f6dfbc9ae08cb03e282a770d586dad8690abf18fddf1f1040" name="libasan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="3c2a8618c432fca24fa853e6ff171a2ebcb5dd7816e5e9e0fb98fedb8369ed9e" name="libasan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="638aeb2a1a32bd017c8dc7ab044396d3b93ab4fb8e0a5eba5c89d313be78653f" name="libasan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="3eeee425969523129f4a24e636e936123efc7538be91a38d427953f5aef1caaf" name="libasan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="242557058eb98a779fe3ca194b7eb7b35d004359af0ade1975e56486a7b7349e" name="libasan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="c9f35e8fad12eff6bb77e0c793be3910dba7b041acdb833bdee112d837f2010f" name="libasan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="73b90de64bf8934401b1f6682d70a343203c2625efa1b23a3c7177862a63ffae" name="libasan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="b99970c04e4160e57e168c963dc492a3900fa83115d424d2b3655ff49088ddbc" name="libasan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="94b7fefba7d47c829876e283bf9fc0af8dddfb231e0c511a720003ab06d89ca2" name="libasan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="c784417960eb9537a0ca9b8a547c61e95c3cdc57c65268d023fd300c0cb300ad" name="libasan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="b7d9beaf198ce0bea0608f143ce2c2134381ad61a9cd6fbd4f8cef39f392e266" name="libasan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="1226b9c14cc1a9785bd5e8ba96ffa5298bb0bd4a5e76b74fc444c427f4488f12" name="libatomic" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="cc751966b5f7ca6ddebc878d23a5783b538c1a588203ff2b726fa31a8bcb4d19" name="libatomic" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="fcebe154d53faad180156fb904c0b8f97ff4b2bbf479b98480592425b1dc0461" name="libatomic" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="78b7d0091e3df5881194c1babef6d5b40d744252855dde14236c23411391dac8" name="libatomic" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="69a800e1920e8393808872110ab3dd9a8bd6bf279358a7e89046dec4cb6debd4" name="libatomic" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="6823a5bdf70ad4e85683c1ab1b46a8bc03a7fda639d883d20b4f91ccc11692f7" name="libatomic" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="c17a1112aa1bd9ac84c729bdb2906aba410c54bee04eac1334f3766c6ee10f30" name="libatomic-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="7055ee3ee0b5986cec7199be6c1a0f14281f7b7e999f7bb4510ebc3ca505d598" name="libatomic-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="1a9ef489c43f90effa717641d9acd8897138568f5ff1b31d878c209837fb1913" name="libatomic-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="ec9aaffc477196dd0300c5e5a213f0034b5932501c2b6de87ad2ea960fcc5dd7" name="libatomic-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="a4589eb9fb6e66d3d0104e47879aa0a162ba75cb47ec0b3eefa87e16f6da23b5" name="libatomic-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="2cea7287fcc11279afc49f311a4ced40253c85566a6bf6aa0628b46e5cd52693" name="libatomic-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="386a57494fbffdb9daffda9c88146926db1d48c2feaa5c98fd0dfdd17985cc41" name="libblkid" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="28.oe2203sp1"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-19" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
       backport-write-correctly-handle-wide-characters.patch
       backport-wall-convert-homebrew-buffering-to-open_memstream.patch
       backport-wall-use-fputs_careful.patch
       backport-hexdump-parse-handle-truncated-format-pattern.patch
       backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
       backport-lscpu-fix-p-output-all-caches-delimiter.patch
       backport-add-return-in-supam_conv-function.patch
       backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
       backport-sulogin-ignore-none-existing-console-devices.patch
       backport-sulogin-fix-KDGKBMODE-ifdef.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-20" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
       backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-21" date="1691064000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libblkid-jfs-avoid-undefined-shift.patch
       backport-cfdisk-add-hint-about-labels-for-bootable-flag.patch
       backport-logger-initialize-socket-credentials-contol-union.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-22" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-column-fix-buffer-overflow-when-l-specified.patch
       backport-column-fix-greedy-mode-on-l.patch
       backport-column-fix-memory-leak.patch
       backport-column-fix-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-23" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-scriptreplay-support-ctrl-s-and-ctrl-g.patch
       backport-login-use-correct-terminal-fd-during-setup.patch
       backport-login-prevent-undefined-ioctl-and-tcsetattr-calls.patch
       backport-libblkid-avoid-memory-leak-of-cachefile-path.patch
       backport-more-avoid-out-of-bound-access.patch
       backport-lslogins-fix-realloc-loop-allocation-size.patch
       backport-ldattach-don-t-call-exit-from-signal-handler.patch
       backport-libblkid-ntfs-validate-that-sector_size-is-a-power-o.patch
       backport-blkid-fix-call-to-err_exclusive_options.patch
       backport-libblkid-reset-errno-before-calling-probefuncs.patch
       backport-lib-path-fix-possible-out-of-boundary-access.patch
       backport-libmount-improve-mnt_table_next_child_fs.patch
       backport-libmount-fix-possible-NULL-dereference-coverity-scan.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-24" date="1705406400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
	backport-libsmartcols-flush-correct-stream.patch
	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
	backport-cal-avoid-out-of-bound-write.patch
	backport-libfdisk-sun-properly-initialize-partition-data.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-25" date="1708344000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:solve the issue of ext4 is incorrectly probed as drbd
        [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
        backport-libblkid-probe-read-data-in-chunks.patch
        backport-libblkid-avoid-aligning-out-of-probing-area.patch
        backport-libblkid-drbd-validate-zero-padding.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-26" date="1709899200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
       backport-libblkid-hfsplus-reduce-false-positive.patch
       backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
       backport-libblkid-drbd-reduce-false-positive.patch
       backport-lib-cpuset-exit-early-from-cpulist_parse.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-27" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
       backport-libblkid-Check-offset-in-LUKS2-header.patch
       backport-more-fix-poll-use.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-28085
- SUG:NA
- DESC:fix CVE-2024-28085</changelog>
</package>
<package pkgid="3409f59b989e9d024397939190cf4bd8bdb28b8744efe8b456115151e7a447ef" name="libblockdev" arch="x86_64">
  <version epoch="0" ver="2.26" rel="4.oe2203sp1"/>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 2.26-2" date="1655294400">- Add BuildRequire make</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 2.26-3" date="1679486400">- remove require dmraid and kmod-kvdo</changelog>
  <changelog author="liyanan &lt;liyana61@h-partners.com&gt; - 2.26-4" date="1704196800">- remove require vdo</changelog>
</package>
<package pkgid="d029a68f52c212a1180ad1107fe785f3684f3066da460d90d17cc3d606da8bea" name="libblockdev-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="4.oe2203sp1"/>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 2.26-2" date="1655294400">- Add BuildRequire make</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 2.26-3" date="1679486400">- remove require dmraid and kmod-kvdo</changelog>
  <changelog author="liyanan &lt;liyana61@h-partners.com&gt; - 2.26-4" date="1704196800">- remove require vdo</changelog>
</package>
<package pkgid="5e317c8020889ea67fda6f3588e3372314a2005e414b2577ad6f0dcdad3dec28" name="libblockdev-debugsource" arch="x86_64">
  <version epoch="0" ver="2.26" rel="4.oe2203sp1"/>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 2.26-2" date="1655294400">- Add BuildRequire make</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 2.26-3" date="1679486400">- remove require dmraid and kmod-kvdo</changelog>
  <changelog author="liyanan &lt;liyana61@h-partners.com&gt; - 2.26-4" date="1704196800">- remove require vdo</changelog>
</package>
<package pkgid="900a251f22b276c0933de7c278fcb88e9b35bc87cbc215bc5d09486e5bfd42dc" name="libblockdev-devel" arch="x86_64">
  <version epoch="0" ver="2.26" rel="4.oe2203sp1"/>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 2.26-2" date="1655294400">- Add BuildRequire make</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 2.26-3" date="1679486400">- remove require dmraid and kmod-kvdo</changelog>
  <changelog author="liyanan &lt;liyana61@h-partners.com&gt; - 2.26-4" date="1704196800">- remove require vdo</changelog>
</package>
<package pkgid="3673f9e87c7fcba541fbc844975ecfe71c5fed8dedb7369209877fd4a9188e25" name="libblockdev-tools" arch="x86_64">
  <version epoch="0" ver="2.26" rel="4.oe2203sp1"/>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 2.26-2" date="1655294400">- Add BuildRequire make</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 2.26-3" date="1679486400">- remove require dmraid and kmod-kvdo</changelog>
  <changelog author="liyanan &lt;liyana61@h-partners.com&gt; - 2.26-4" date="1704196800">- remove require vdo</changelog>
</package>
<package pkgid="b23b2872aba3773d0ba3b84fd21b547da697a79cfaa0d24b44fc88baef8de144" name="libbpf" arch="x86_64">
  <version epoch="2" ver="0.8.1" rel="10.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-10" date="1701950400">- backport patches from upstream:
  backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
  backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
  backport-libbpf-Fix-is_pow_of_2.patch
  backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch</changelog>
</package>
<package pkgid="48f68ecf0941109367fe8d9f609bc9ac1378f62f69a86e9326660f7e07bb5f20" name="libbpf" arch="x86_64">
  <version epoch="2" ver="0.8.1" rel="3.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan2@huawei.com&gt; - 2:0.3-1" date="1640692800">- update libbpf from v0.1.1 to v0.3</changelog>
  <changelog author="hujiawang &lt;hujiawang1@huawei.com&gt; - 2:0.3-2" date="1661169600">- change the package name</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
</package>
<package pkgid="f4c71c39f9d0c7db471d9e8d1cb86ca5bbb162f23f969264e40f32cfaa9555c7" name="libbpf" arch="x86_64">
  <version epoch="2" ver="0.8.1" rel="9.oe2203sp1"/>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
</package>
<package pkgid="462478b418782ca7dd5036c1fd72caa0f5f378d1e2c7efb6be826cf475bd8dfa" name="libbpf-debuginfo" arch="x86_64">
  <version epoch="2" ver="0.8.1" rel="10.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-10" date="1701950400">- backport patches from upstream:
  backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
  backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
  backport-libbpf-Fix-is_pow_of_2.patch
  backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch</changelog>
</package>
<package pkgid="352744db7d954c3f1999b2503354ba1d346399a91bc151461b18505daa6ec6a3" name="libbpf-debuginfo" arch="x86_64">
  <version epoch="2" ver="0.8.1" rel="3.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan2@huawei.com&gt; - 2:0.3-1" date="1640692800">- update libbpf from v0.1.1 to v0.3</changelog>
  <changelog author="hujiawang &lt;hujiawang1@huawei.com&gt; - 2:0.3-2" date="1661169600">- change the package name</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
</package>
<package pkgid="3824ddff56a1296d76ac745133637b9e55b721dbcae51f065a4e5db8ac53921c" name="libbpf-debuginfo" arch="x86_64">
  <version epoch="2" ver="0.8.1" rel="9.oe2203sp1"/>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
</package>
<package pkgid="a56db64b497001555d59db4bd5f81a82e266049708f6144ddf0f7a390924ed07" name="libbpf-debugsource" arch="x86_64">
  <version epoch="2" ver="0.8.1" rel="10.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-10" date="1701950400">- backport patches from upstream:
  backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
  backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
  backport-libbpf-Fix-is_pow_of_2.patch
  backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch</changelog>
</package>
<package pkgid="792142284a7949164b57db81a00a05f7a092254f58ff3d94a13e6f31d743c838" name="libbpf-debugsource" arch="x86_64">
  <version epoch="2" ver="0.8.1" rel="3.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan2@huawei.com&gt; - 2:0.3-1" date="1640692800">- update libbpf from v0.1.1 to v0.3</changelog>
  <changelog author="hujiawang &lt;hujiawang1@huawei.com&gt; - 2:0.3-2" date="1661169600">- change the package name</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
</package>
<package pkgid="202ecc016335e47133b80002ee4e5cba2c45e6117bce50c0d653e06417439893" name="libbpf-debugsource" arch="x86_64">
  <version epoch="2" ver="0.8.1" rel="9.oe2203sp1"/>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
</package>
<package pkgid="b25d5c67b3543c378c6a4522291ed588cfb5930981faa648e8eda1d94b7e01f5" name="libbpf-devel" arch="x86_64">
  <version epoch="2" ver="0.8.1" rel="10.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-10" date="1701950400">- backport patches from upstream:
  backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
  backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
  backport-libbpf-Fix-is_pow_of_2.patch
  backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch</changelog>
</package>
<package pkgid="45f1149c0b1c4885c5b7aef763a97766607dde2a07a398fc005655f714e46eb0" name="libbpf-devel" arch="x86_64">
  <version epoch="2" ver="0.8.1" rel="3.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan2@huawei.com&gt; - 2:0.3-1" date="1640692800">- update libbpf from v0.1.1 to v0.3</changelog>
  <changelog author="hujiawang &lt;hujiawang1@huawei.com&gt; - 2:0.3-2" date="1661169600">- change the package name</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
</package>
<package pkgid="9c565ac9c8fc81e4d20770a094d2f4545d96ab0f5acf3251d5849814e2637dc2" name="libbpf-devel" arch="x86_64">
  <version epoch="2" ver="0.8.1" rel="9.oe2203sp1"/>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
</package>
<package pkgid="55ebe06371086d402c4c822701576a8de2f59791d3602d3d13d9db88eba79c9f" name="libbpf-static" arch="x86_64">
  <version epoch="2" ver="0.8.1" rel="10.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-10" date="1701950400">- backport patches from upstream:
  backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
  backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
  backport-libbpf-Fix-is_pow_of_2.patch
  backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch</changelog>
</package>
<package pkgid="0e7cbd0bcd731b8a948902fe9922b3ae5d3c511b86b037624b79fd3468c30d45" name="libbpf-static" arch="x86_64">
  <version epoch="2" ver="0.8.1" rel="3.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan2@huawei.com&gt; - 2:0.3-1" date="1640692800">- update libbpf from v0.1.1 to v0.3</changelog>
  <changelog author="hujiawang &lt;hujiawang1@huawei.com&gt; - 2:0.3-2" date="1661169600">- change the package name</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
</package>
<package pkgid="c662d08f4243d1d1f16844c32be99cf3394452f512b085fc7a52694dbed3b498" name="libbpf-static" arch="x86_64">
  <version epoch="2" ver="0.8.1" rel="9.oe2203sp1"/>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
</package>
<package pkgid="f7cc8bd5665d760cab7f9c059c3124e072e81df5b3cc1b86d1469d93fb353f3a" name="libbson" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
</package>
<package pkgid="99fd7566e66eb1bcd90e977d48ca5eb9d549dd6efb75480b1483db9151e0175f" name="libbson" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.13.1-7" date="1705406400">- Fix CVE-2023-0437</changelog>
</package>
<package pkgid="85122d869de1a65ed0edc7e411d39193337438cf74a0063d0bcbd1999b0e03e9" name="libbson-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
</package>
<package pkgid="720e1139ff71d390d295170298293521c42b43fae177d4b64ccd4dc0727307bb" name="libbson-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.13.1-7" date="1705406400">- Fix CVE-2023-0437</changelog>
</package>
<package pkgid="cedade182d40d9e556046fe6804de3bf0ebd5f259865c3ab2b91028a0bd9832a" name="libcap" arch="x86_64">
  <version epoch="0" ver="2.61" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.32-3" date="1636372800">- capsh better error handling for integer parsing
- setcap clean up error handling of the ns rootid argument</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-1" date="1637841600">- update to 2.61</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-2" date="1661601600">- fix syntax error in DEBUG protected setcap.c code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-3" date="1665576000">- backport upstream patches</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-4" date="1667304000">- backport upstream patch</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.61-5" date="1685534400">- fix CVE-2023-2602/CVE-2023-2603 &amp;&amp; fix memory leaks</changelog>
</package>
<package pkgid="6c494b3be3d0673ab9ff2d38b1ba6526b1e9dc40643f6ad61bedef59d707403e" name="libcap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.61" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.32-3" date="1636372800">- capsh better error handling for integer parsing
- setcap clean up error handling of the ns rootid argument</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-1" date="1637841600">- update to 2.61</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-2" date="1661601600">- fix syntax error in DEBUG protected setcap.c code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-3" date="1665576000">- backport upstream patches</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-4" date="1667304000">- backport upstream patch</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.61-5" date="1685534400">- fix CVE-2023-2602/CVE-2023-2603 &amp;&amp; fix memory leaks</changelog>
</package>
<package pkgid="0ee23501821b6274f19485aa55fcf77ac83bf417c6ec5ec7f609fafe92fcd4c0" name="libcap-debugsource" arch="x86_64">
  <version epoch="0" ver="2.61" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.32-3" date="1636372800">- capsh better error handling for integer parsing
- setcap clean up error handling of the ns rootid argument</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-1" date="1637841600">- update to 2.61</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-2" date="1661601600">- fix syntax error in DEBUG protected setcap.c code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-3" date="1665576000">- backport upstream patches</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-4" date="1667304000">- backport upstream patch</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.61-5" date="1685534400">- fix CVE-2023-2602/CVE-2023-2603 &amp;&amp; fix memory leaks</changelog>
</package>
<package pkgid="6164532310ca9d86abb62b84a0ddffc1e29be1e390dfa9082a0bd5a58a58f4ed" name="libcap-devel" arch="x86_64">
  <version epoch="0" ver="2.61" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.32-3" date="1636372800">- capsh better error handling for integer parsing
- setcap clean up error handling of the ns rootid argument</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-1" date="1637841600">- update to 2.61</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-2" date="1661601600">- fix syntax error in DEBUG protected setcap.c code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-3" date="1665576000">- backport upstream patches</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-4" date="1667304000">- backport upstream patch</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.61-5" date="1685534400">- fix CVE-2023-2602/CVE-2023-2603 &amp;&amp; fix memory leaks</changelog>
</package>
<package pkgid="58f25b1c0afaa046acc2f902c26a7375e3268d7814da923b2d16b22039d48957" name="libcap-help" arch="noarch">
  <version epoch="0" ver="2.61" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.32-3" date="1636372800">- capsh better error handling for integer parsing
- setcap clean up error handling of the ns rootid argument</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-1" date="1637841600">- update to 2.61</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-2" date="1661601600">- fix syntax error in DEBUG protected setcap.c code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-3" date="1665576000">- backport upstream patches</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-4" date="1667304000">- backport upstream patch</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.61-5" date="1685534400">- fix CVE-2023-2602/CVE-2023-2603 &amp;&amp; fix memory leaks</changelog>
</package>
<package pkgid="81418ad1d21d47b559d1f8a907ae6789a7b5dd6379bc4b558b64ed3eae2bb2a7" name="libcephfs-devel" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="61f7071600094c4ffe2251d41351c4a89f567df97841538cc043007ea37850c7" name="libcephfs-devel" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="eadb3957721b851d004eae5b94fc840c2716cbfe59ab48b1b44e7f1c80dcac5f" name="libcephfs2" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="780c32f9308ff0c860f7fab96745313cbbf3013f77ef25c103c82beea12f5fc5" name="libcephfs2" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="e99edf80d80e119c5a1df5d74b287272c2efee23582ec473c604ae3dd436dd97" name="libcephsqlite" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="662c3aa49a498a2ce8baed58e893e257530670361ae8bd3e12913722208e587e" name="libcephsqlite" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="89fa92dbf816d3bd0aac8c117cc1f6b468e07a607c71c228ffc19e1d410f4c0e" name="libcephsqlite-devel" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="73ce9648242837723615fdad6d6e7467c88c3a6c6840111ff34e95d1b973caab" name="libcephsqlite-devel" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="da9e4b16c8cad6a70ef71c842d97dfc6e66ae312cfcb362b207c54247388b2c7" name="libcgroup" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="1.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 2.0.3-1" date="1675944000">- Type: upgrade
- Id:NA
- SUG:NA
- DESC:update release version to v2.0.3</changelog>
</package>
<package pkgid="9f68ba8dc01bed203f70ecfcc38ff5d1dd6ca995378cf985bafe64d27e6be0a4" name="libcgroup-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="1.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 2.0.3-1" date="1675944000">- Type: upgrade
- Id:NA
- SUG:NA
- DESC:update release version to v2.0.3</changelog>
</package>
<package pkgid="355703d72101ab607198263b04b43e87a45cd1ccd8a2f3ac7f2f9e69bee8947c" name="libcgroup-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="1.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 2.0.3-1" date="1675944000">- Type: upgrade
- Id:NA
- SUG:NA
- DESC:update release version to v2.0.3</changelog>
</package>
<package pkgid="077fdf30951fd85e24bfbd2191aac879dbb0b65fa5f5691bb524ca9a66d8e8fa" name="libcgroup-devel" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="1.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 2.0.3-1" date="1675944000">- Type: upgrade
- Id:NA
- SUG:NA
- DESC:update release version to v2.0.3</changelog>
</package>
<package pkgid="f1d9dc404f3a1222f7055e2915b9bc4e08f77e1d621eff5a8a13a0415120ec1a" name="libcgroup-help" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="1.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 2.0.3-1" date="1675944000">- Type: upgrade
- Id:NA
- SUG:NA
- DESC:update release version to v2.0.3</changelog>
</package>
<package pkgid="d6a547de3188554bd661e19f729cfc12a0378c2f143e8f5e2ddb3bd883772475" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="14.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-5" date="1651838400">- Type:cves
- CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
- SUG:NA
- DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
</package>
<package pkgid="b246036af84f5389a115b27224abc15509280549ae5ebdacb359563d391cf05b" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="15.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
</package>
<package pkgid="374f21c5051f61e96fe4702916d57f97cb6f3f0e5808c5616b0de8183bc9568c" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="16.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
</package>
<package pkgid="080a61d71588249bb68585947ddd34455a09b9ca74bc09fe6f9c92c479c7b71c" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="17.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
</package>
<package pkgid="acb843591817d8f8e2e67f76d70660871a56667b5cf20c1076759d3ac5887c65" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="19.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
</package>
<package pkgid="1da0919eb69b50c2e83043976ac400945506c79a3230bb1d4c20c61e31f6b06f" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="20.oe2203sp1"/>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
</package>
<package pkgid="190bb58194ce5cab264e717a7a9ab3a1d87e40bce7ea7432287024f590c891e7" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="23.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
</package>
<package pkgid="07e653f4b8af8d252ab4a4d62c18df598b1498945be828fea9c633e0570e2516" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="24.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
</package>
<package pkgid="b063d121fb259dad2beb31b370c7ef53a3150b77685ec2236c7c89615363ebaa" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="25.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
</package>
<package pkgid="6ca064fa9e11f98d89c5ae5b8f169f4a4de6c54fc48f542e99129a87b1fe3f57" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="27.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
</package>
<package pkgid="6d397e9da90dbf66cb7d05ddd59b0b4180475d224aec096527af2ab630aabd42" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="28.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
</package>
<package pkgid="be15bcaa530d9d2cd9eebc751ba99a397c6dcb3ff994ca0b9b2ae12f717218d3" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="14.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-5" date="1651838400">- Type:cves
- CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
- SUG:NA
- DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
</package>
<package pkgid="d3e27599b1709d29ed2932ff2177b13463d2af42f4eec5ec4c07a1fb716f3746" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="15.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
</package>
<package pkgid="6994c55170a2d570557d46a5b8345804fcdaef006612a43227b96a16218b1504" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="16.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
</package>
<package pkgid="d34430e5c6d7e85b8d1b899c2b4500ed268200311834e0b7328ccedcaef6bbdd" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="17.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
</package>
<package pkgid="d3cfe0291197d72b8a3f61908c49a281e463ca62f8288fd9c7d1fb88ca01aa8a" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="19.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
</package>
<package pkgid="50c9e1c97e295408b5ea291b12a9ab4f722cc5f37df94c1a3cb416a4c8a74092" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="20.oe2203sp1"/>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
</package>
<package pkgid="d5b7b55c37648810c3fbcaa3a0a3216ff312641437a55ae7fe58b346c5942ebf" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="23.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
</package>
<package pkgid="4c396dff7b5e501ec162fc97a2d8a20a4aa7d7db3978949ba9cce35091c13a13" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="24.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
</package>
<package pkgid="a45427a1fe5899f6d010b9d2010ce5b239bdf4dd5f36ba043942ea0243852168" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="25.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
</package>
<package pkgid="378d016cb0d1debcf737cbed17e614f9837e1269a12f6f7fdf6d0c1f67df4b47" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="27.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
</package>
<package pkgid="4b0412f2e12b324b84c6396044ce8775d6a32f5c22663b76e722a85fd0114706" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.79.1" rel="28.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
</package>
<package pkgid="e1f55b034e49483d59bd61d10ce12f5836b937e5d26a39962e709377ae70e448" name="libdnet" arch="x86_64">
  <version epoch="0" ver="1.14" rel="4.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-2" date="1667304000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix Potential Null Pointer Dereference</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-3" date="1668772800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes '&lt; version' in spec</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.14-4" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="4b21ebfb53c44be088efa1e416e11c33915bf1225516e1b85b308812a2d46b60" name="libdnet-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.14" rel="4.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-2" date="1667304000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix Potential Null Pointer Dereference</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-3" date="1668772800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes '&lt; version' in spec</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.14-4" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="58d14ec049cf917011f9f230bb8bb4f8800d3fda5b6075abee71373d9b89cf73" name="libdnet-debugsource" arch="x86_64">
  <version epoch="0" ver="1.14" rel="4.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-2" date="1667304000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix Potential Null Pointer Dereference</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-3" date="1668772800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes '&lt; version' in spec</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.14-4" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="c41b7fc2afdc49d359bf6b9ae5266b0fa5d0d52d777d946ad5ec3ffd3c203879" name="libdnet-devel" arch="x86_64">
  <version epoch="0" ver="1.14" rel="4.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-2" date="1667304000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix Potential Null Pointer Dereference</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-3" date="1668772800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes '&lt; version' in spec</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.14-4" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="a1f02a764f2ea78550c1520875dcac99788d0f71ca7a94a1e7bc12f60ea49b3d" name="libdnet-help" arch="noarch">
  <version epoch="0" ver="1.14" rel="4.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-2" date="1667304000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix Potential Null Pointer Dereference</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-3" date="1668772800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes '&lt; version' in spec</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.14-4" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="1499da332dfa525d7905bb5f9f7b447e107d8c912ace3751dde25ae4046fb263" name="libdnet-progs" arch="x86_64">
  <version epoch="0" ver="1.14" rel="4.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-2" date="1667304000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix Potential Null Pointer Dereference</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-3" date="1668772800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes '&lt; version' in spec</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.14-4" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="b620de8f34a966f6f80c08d0009235df7e070d5937da7fbd083a19ed408ceada" name="libdnf" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="4.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.48.0-2" date="1623153600">- Type:CVE
- ID:CVE-2021-3445
- SUG:NA
- DESC:fix CVE-2021-3445</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
</package>
<package pkgid="de424f2e80bb097ce9fb44f6bbdd9538167d0f7eeea3f5742c77318e2ca54e44" name="libdnf" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
</package>
<package pkgid="983e760faac55e1e2e70efe3c574d93e44e7125eba60773a4da1fb2f42fb2070" name="libdnf" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="6.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
</package>
<package pkgid="9ff527bf485a96146f2bbdc286653c353fc9d65e04a0d72034b85382ba477f7d" name="libdnf" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="7.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
</package>
<package pkgid="85a87621effebbe79e6aad9f882690c01bfdac4ced9b4f2fd193673b40e30a4e" name="libdnf" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="8.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.69.0-8" date="1705320000">- Modify loongarch64 patch use all arch</changelog>
</package>
<package pkgid="677412c3f494141a9ff3bf9b1400781bfecc3f9940eeffadddede4caaee86bfe" name="libdnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="4.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.48.0-2" date="1623153600">- Type:CVE
- ID:CVE-2021-3445
- SUG:NA
- DESC:fix CVE-2021-3445</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
</package>
<package pkgid="b02378f32b8fbef9d3ed8c6dde29f0f8ee1311ae516c99e158a079a29dab1f08" name="libdnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
</package>
<package pkgid="2c097d68cf97e7f473af434262035e2e796646ac048ed1d45de677bd9035b8ce" name="libdnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="6.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
</package>
<package pkgid="b7d38204e59fcb54a3a9891d69848e7cedd12e814fdb14cf1f875d62f3bf0cda" name="libdnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="7.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
</package>
<package pkgid="b7f0513d5fafe020b39e2aae2b9dc428a2378505b19865c878bd8697ac224231" name="libdnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="8.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.69.0-8" date="1705320000">- Modify loongarch64 patch use all arch</changelog>
</package>
<package pkgid="ce05fed2cad0f799f8fa598de58d065f4c68f5bc5c02f918ae5ea4792e5faa22" name="libdnf-debugsource" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="4.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.48.0-2" date="1623153600">- Type:CVE
- ID:CVE-2021-3445
- SUG:NA
- DESC:fix CVE-2021-3445</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
</package>
<package pkgid="e9269b15395f3361c7e0d96851cb70fb38c83217afd83568f9dd9bdadf78b2e1" name="libdnf-debugsource" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
</package>
<package pkgid="dcea34f164431c216fc89f2ee7b8e064718ba6195ddd8ff1c5a64099e0920d62" name="libdnf-debugsource" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="6.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
</package>
<package pkgid="87a10a1d4e2e21694b593715a6b77b97bcda417958e4f8703c8a0fb6608439b3" name="libdnf-debugsource" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="7.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
</package>
<package pkgid="06b98385b9e214f79f4ef051ec607dadeb0ddc2ae1aed57ece4242b285557823" name="libdnf-debugsource" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="8.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.69.0-8" date="1705320000">- Modify loongarch64 patch use all arch</changelog>
</package>
<package pkgid="d8be5dedb8eeb00097fd9a03ae7126077fa70b2acbe07653a06c18e6b1224f39" name="libdnf-devel" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="4.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.48.0-2" date="1623153600">- Type:CVE
- ID:CVE-2021-3445
- SUG:NA
- DESC:fix CVE-2021-3445</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
</package>
<package pkgid="b7447fe0dc994059ed095e9df0394d35a1be7f5ce0889267a8daa33b0c7e9cb0" name="libdnf-devel" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
</package>
<package pkgid="4f853d9508397fcc010cc88a9491ddfb6e3b5a817c65dbef0478d2e82cddc28f" name="libdnf-devel" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="6.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
</package>
<package pkgid="372980c03075341c9b537fb5ea06a6b063abb1e1ef137e65c6e0057c842aa3da" name="libdnf-devel" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="7.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
</package>
<package pkgid="dc493ff0c1fa3106a5aa6babfc16bf9deddfa1c2745e214b6375152498f9eb5a" name="libdnf-devel" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="8.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.69.0-8" date="1705320000">- Modify loongarch64 patch use all arch</changelog>
</package>
<package pkgid="441fcc99381b626537095434b71a3427a8cf839b815afd37c38780cec500f283" name="libdwarf" arch="x86_64">
  <version epoch="1" ver="0.9.1" rel="1.oe2203sp1"/>
  <changelog author="panys&lt;panyanshuang@nati-gba.cn&gt; - 20210528-1" date="1658836800">- upgrade to version 20210528</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 0.7.0-1" date="1686830400">- Update to 0.7.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.9.1-1" date="1711368000">- Update to 0.9.1 and fix CVE-2024-2002</changelog>
</package>
<package pkgid="6722f9f5e905b6e67100661920d10e54055b12c83a681b772699f703a4e4f39e" name="libdwarf-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.9.1" rel="1.oe2203sp1"/>
  <changelog author="panys&lt;panyanshuang@nati-gba.cn&gt; - 20210528-1" date="1658836800">- upgrade to version 20210528</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 0.7.0-1" date="1686830400">- Update to 0.7.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.9.1-1" date="1711368000">- Update to 0.9.1 and fix CVE-2024-2002</changelog>
</package>
<package pkgid="0269a1f081684f1533bdf7afd57be36885a683152d573ecfdbfa0082c415b170" name="libdwarf-debugsource" arch="x86_64">
  <version epoch="1" ver="0.9.1" rel="1.oe2203sp1"/>
  <changelog author="panys&lt;panyanshuang@nati-gba.cn&gt; - 20210528-1" date="1658836800">- upgrade to version 20210528</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 0.7.0-1" date="1686830400">- Update to 0.7.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.9.1-1" date="1711368000">- Update to 0.9.1 and fix CVE-2024-2002</changelog>
</package>
<package pkgid="fa89de9455072564c74cecd7342deec391915e7419665705484fed7ea5ead331" name="libdwarf-devel" arch="x86_64">
  <version epoch="1" ver="0.9.1" rel="1.oe2203sp1"/>
  <changelog author="panys&lt;panyanshuang@nati-gba.cn&gt; - 20210528-1" date="1658836800">- upgrade to version 20210528</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 0.7.0-1" date="1686830400">- Update to 0.7.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.9.1-1" date="1711368000">- Update to 0.9.1 and fix CVE-2024-2002</changelog>
</package>
<package pkgid="3ceef7ec157d5685a4576bc2ec0cdd25e71855f69dec3e43b94d89c76cd3bfee" name="libdwarf-help" arch="noarch">
  <version epoch="1" ver="0.9.1" rel="1.oe2203sp1"/>
  <changelog author="panys&lt;panyanshuang@nati-gba.cn&gt; - 20210528-1" date="1658836800">- upgrade to version 20210528</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 0.7.0-1" date="1686830400">- Update to 0.7.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.9.1-1" date="1711368000">- Update to 0.9.1 and fix CVE-2024-2002</changelog>
</package>
<package pkgid="6e47b32587709948dbf262cf6de84371f5cdc74076536cf25143e33d93eefbd0" name="libdwarf-tools" arch="x86_64">
  <version epoch="1" ver="0.9.1" rel="1.oe2203sp1"/>
  <changelog author="panys&lt;panyanshuang@nati-gba.cn&gt; - 20210528-1" date="1658836800">- upgrade to version 20210528</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 0.7.0-1" date="1686830400">- Update to 0.7.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.9.1-1" date="1711368000">- Update to 0.9.1 and fix CVE-2024-2002</changelog>
</package>
<package pkgid="f7638d652995c4c12db4c227cc950ab3e78956403fd046e741360736e0bdcf70" name="libexif" arch="x86_64">
  <version epoch="0" ver="0.6.22" rel="5.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 0.6.22-3" date="1666094400">- fix fuzz test error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-4" date="1692878400">- fix typo in changelog</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-5" date="1705320000">- fix CVE-2020-0452</changelog>
</package>
<package pkgid="406092bb2e5daa17809be908c7c3ebcb655f46900d59175c8da2435f8b5dd13d" name="libexif-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.6.22" rel="5.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 0.6.22-3" date="1666094400">- fix fuzz test error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-4" date="1692878400">- fix typo in changelog</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-5" date="1705320000">- fix CVE-2020-0452</changelog>
</package>
<package pkgid="5e1aba7666fc86103458d4575919a153fe0022b3212c3a4bff707522c5939944" name="libexif-debugsource" arch="x86_64">
  <version epoch="0" ver="0.6.22" rel="5.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 0.6.22-3" date="1666094400">- fix fuzz test error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-4" date="1692878400">- fix typo in changelog</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-5" date="1705320000">- fix CVE-2020-0452</changelog>
</package>
<package pkgid="8825950990cac085410d7250f29508490db78c6c74d68e9342128b3d451e5063" name="libexif-devel" arch="x86_64">
  <version epoch="0" ver="0.6.22" rel="5.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 0.6.22-3" date="1666094400">- fix fuzz test error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-4" date="1692878400">- fix typo in changelog</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-5" date="1705320000">- fix CVE-2020-0452</changelog>
</package>
<package pkgid="1d13a76524c4ad549653ddacdc3932559be8ff425fb3839554ddaa59d52a197c" name="libexif-help" arch="noarch">
  <version epoch="0" ver="0.6.22" rel="5.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 0.6.22-3" date="1666094400">- fix fuzz test error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-4" date="1692878400">- fix typo in changelog</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-5" date="1705320000">- fix CVE-2020-0452</changelog>
</package>
<package pkgid="e6dd3a417b54e32a72e04b199e740a4490de4f810017fd0a46bc531df7a242cb" name="libfastjson" arch="x86_64">
  <version epoch="0" ver="0.99.9" rel="3.oe2203sp1"/>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 0.99.9-1" date="1638273600">- update to 0.99.9</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 0.99.9-2" date="1662638400">- fix obsoletes in spec</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.99.9-3" date="1680004800">- fix CVE-2020-12762</changelog>
</package>
<package pkgid="0e1eb2211b52ba721800dabbbc44328a31d7ca7126366a89c5e0c11d5733a097" name="libfastjson-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.99.9" rel="3.oe2203sp1"/>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 0.99.9-1" date="1638273600">- update to 0.99.9</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 0.99.9-2" date="1662638400">- fix obsoletes in spec</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.99.9-3" date="1680004800">- fix CVE-2020-12762</changelog>
</package>
<package pkgid="0bf85d8633d1932905d8ecc1f786c4de8e554374d09e091b768c5f6f6da20a1c" name="libfastjson-debugsource" arch="x86_64">
  <version epoch="0" ver="0.99.9" rel="3.oe2203sp1"/>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 0.99.9-1" date="1638273600">- update to 0.99.9</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 0.99.9-2" date="1662638400">- fix obsoletes in spec</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.99.9-3" date="1680004800">- fix CVE-2020-12762</changelog>
</package>
<package pkgid="8dbace7f4833c3ee8cab6d7b360706fce10f1b4f237fa0c7346475790ccec5f9" name="libfastjson-devel" arch="x86_64">
  <version epoch="0" ver="0.99.9" rel="3.oe2203sp1"/>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 0.99.9-1" date="1638273600">- update to 0.99.9</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 0.99.9-2" date="1662638400">- fix obsoletes in spec</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.99.9-3" date="1680004800">- fix CVE-2020-12762</changelog>
</package>
<package pkgid="437c541e5751b7ad5a394bdc8f24d91bf97184b545dad54322b77ed0faafe14b" name="libfdisk" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="28.oe2203sp1"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-19" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
       backport-write-correctly-handle-wide-characters.patch
       backport-wall-convert-homebrew-buffering-to-open_memstream.patch
       backport-wall-use-fputs_careful.patch
       backport-hexdump-parse-handle-truncated-format-pattern.patch
       backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
       backport-lscpu-fix-p-output-all-caches-delimiter.patch
       backport-add-return-in-supam_conv-function.patch
       backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
       backport-sulogin-ignore-none-existing-console-devices.patch
       backport-sulogin-fix-KDGKBMODE-ifdef.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-20" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
       backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-21" date="1691064000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libblkid-jfs-avoid-undefined-shift.patch
       backport-cfdisk-add-hint-about-labels-for-bootable-flag.patch
       backport-logger-initialize-socket-credentials-contol-union.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-22" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-column-fix-buffer-overflow-when-l-specified.patch
       backport-column-fix-greedy-mode-on-l.patch
       backport-column-fix-memory-leak.patch
       backport-column-fix-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-23" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-scriptreplay-support-ctrl-s-and-ctrl-g.patch
       backport-login-use-correct-terminal-fd-during-setup.patch
       backport-login-prevent-undefined-ioctl-and-tcsetattr-calls.patch
       backport-libblkid-avoid-memory-leak-of-cachefile-path.patch
       backport-more-avoid-out-of-bound-access.patch
       backport-lslogins-fix-realloc-loop-allocation-size.patch
       backport-ldattach-don-t-call-exit-from-signal-handler.patch
       backport-libblkid-ntfs-validate-that-sector_size-is-a-power-o.patch
       backport-blkid-fix-call-to-err_exclusive_options.patch
       backport-libblkid-reset-errno-before-calling-probefuncs.patch
       backport-lib-path-fix-possible-out-of-boundary-access.patch
       backport-libmount-improve-mnt_table_next_child_fs.patch
       backport-libmount-fix-possible-NULL-dereference-coverity-scan.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-24" date="1705406400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
	backport-libsmartcols-flush-correct-stream.patch
	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
	backport-cal-avoid-out-of-bound-write.patch
	backport-libfdisk-sun-properly-initialize-partition-data.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-25" date="1708344000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:solve the issue of ext4 is incorrectly probed as drbd
        [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
        backport-libblkid-probe-read-data-in-chunks.patch
        backport-libblkid-avoid-aligning-out-of-probing-area.patch
        backport-libblkid-drbd-validate-zero-padding.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-26" date="1709899200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
       backport-libblkid-hfsplus-reduce-false-positive.patch
       backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
       backport-libblkid-drbd-reduce-false-positive.patch
       backport-lib-cpuset-exit-early-from-cpulist_parse.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-27" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
       backport-libblkid-Check-offset-in-LUKS2-header.patch
       backport-more-fix-poll-use.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-28085
- SUG:NA
- DESC:fix CVE-2024-28085</changelog>
</package>
<package pkgid="548ea9e0644edcb01e576658714eb6c1f001f27ac15ba806c5b8f9d22e34231f" name="libgcc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="636475d6f4bd94016fb257c1e2e61c0e3a7a5bf677996c42a9803da8db0de530" name="libgcc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="a09713d70e305220596904900cee2e2e0c0178c7fe21290aa8286c56aff7e4b3" name="libgcc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="72748a8c4b8e520e40e26fed13fbc0c2fdcbed307531eff33f4d467fd7655fda" name="libgcc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="a3afe530ff6dcab5c421bdf1ee89a08b95f6a6ad1002084f8a7108344f99173b" name="libgcc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="6a4e6db1cc75440fdcd17fc48d673caaabdab74ebd169c31799f7bb4549c1dc0" name="libgcc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="e77255c22a2ce0777ab8e8ad68bad095949446511e7701daeed682d64a9d5a82" name="libgccjit" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="a774d7dfa2561ae59f6871a31bea66391caaa775e8e4f47679215b92ba696858" name="libgccjit" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="a4e4e5e900545bcb8a00515072b5dd87512834dc83d678b28ec0529824e43cd1" name="libgccjit" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="ab8983a18276334299725932bcb82b07edab876a1739b6b223741fdf6fcced40" name="libgccjit" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="711026e4b06dd98447560ef965940c2114b92ed9ffb737beabf88271770cb6d1" name="libgccjit" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="27ab2beedc03bd375790a150731f5610a56d2553d206d347f241abd20057e6f7" name="libgccjit" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="ac92e3761c6ef8b29924dda2f36ce2f857c0ca2078ce31b391b50da275426926" name="libgccjit-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="7c9bc2501946febdb96d447657ca2be6ced82e751ab0c83bd7e45cc2e6023f3d" name="libgccjit-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="29ff2435bdd081a81c4144a6d13dfcd48aaf1cd205a5579d8a7084ce11af96fd" name="libgccjit-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="f346f9c05101e957cb1bce53ffc18bd1978df1a7edd0bbd08fcf0b7f49d769b3" name="libgccjit-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="68c891ac7f16e8ead0d5922e9fa02b9a5552edc99e3fe7bb9fbbb01e108fb9d7" name="libgccjit-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="b1df374e136166f0ec6c09ac90f1b6e91b4e2501c11fada9a8a21b5f3d21f041" name="libgccjit-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="b731d961a23f465148599e7b8af95c39bb0a339d20462862155f57b59a695f35" name="libgfapi-devel" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="e3df35062ce729b6b4faa5fe74e6f1869985f7a4d808415069d45f50ee59f5eb" name="libgfapi-devel" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="df4e6f075885b6ef4342f88f45c32c7cbe0689c26cea0516b4b8d8900f7ab6b7" name="libgfapi0" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="b765719111db1bc5e6c9eebb535a50fcd9b7bf12f0435825552d9a4cf18f5e46" name="libgfapi0" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="d95430191ca61ea7b42fe7992351cbbee7d83fbc0d065242138de1d1482e5942" name="libgfchangelog-devel" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="4b38901c198ce451b895b3553b3b1f62a8c04935539ce3e7eb2c11ac16ac57f1" name="libgfchangelog-devel" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="7bcf7e7d57c6d1d62ff6ab4c4a0cfdcdf014ac72d7d5aee18038c654f070af7a" name="libgfchangelog0" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="4678fc2ed7e6146df0a7adde910d2ccd8c7cf16c5ab7a2943d80cf8183d3208d" name="libgfchangelog0" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="92b639ca03ffea10b5080133eeda0d77fdbc7231218c7c8839d5058584a785d0" name="libgfortran" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="26e1f19d7fe9d425831f0f1dd57c32b4f526b45cc904e86c623be59f40bddbd1" name="libgfortran" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="014893c6085d66ab8ee0e5653d4cda55c92485ca9d32c1630299134a760e6fe1" name="libgfortran" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="674aef636f34f671b20d54f600597946d8bb75fb51ce18b4041b2ec7745fc7a8" name="libgfortran" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="3ac15e2bd8b606802e2a4363bd41d2e03146549950bf434d2a895d0adab9a94e" name="libgfortran" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="0b64dd479adb1b239da8b71f659bd97a7016ada29460ae3955770ec3c8818bf9" name="libgfortran" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="4c59ced09097f87d48c4f3bb7129e4fe0a287f8937b4f7c1ab42ee45f2bd0175" name="libgfortran-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="7da5816f3bd9fb03663d9775370ce4ded49671b913f025b4ca68945d55427e9c" name="libgfortran-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="ee4849f03c1f2c5a07590a91e295cd192973085d63ea9555582ab76e79c19c28" name="libgfortran-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="b0715a7a6eb2f3e21cc7945b490d92d5754f39b98d7f11a790b29cd2a19791f8" name="libgfortran-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="998d16e7d23b3a86b83c778eb02c776441cc9709a9a59c1611b3bf8c7c9edc7b" name="libgfortran-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="9ae8bea5e5f26456d26eed22e4451d0259d1759b13347ff8c6e46ccb0a580753" name="libgfortran-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="75a798c7814129a219254558413c4faf1f5e0272ef3b2c9df0e0fecebb4775a1" name="libgfrpc-devel" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="baf5d721815c2a8a962b4095d865f84f6f06529b9cfcfa4ac848762b06a26798" name="libgfrpc-devel" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="e60a070176296c6ceceb875799a3699c267bad2e6116c1b930dd3881d608fb63" name="libgfrpc0" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="d8866aeff9828dee2adb5aca564cd5a35256c7e01f32df6952485516f7d0a7ff" name="libgfrpc0" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="6e7d4a6c4a27e30cc9ba2619b960333cf4dda48ebbc820b1cf2c971a9fbc5b85" name="libgfxdr-devel" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="596f2817bf5ad60bf04e220bf66bd3abdbc160b766aca5d6751b111867d2a022" name="libgfxdr-devel" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="183c64c22455d086cb37edb5d7abff890520865876bbd775af86802e1aefec5a" name="libgfxdr0" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="a1c3986d14a03de70e5c26e509efaa15f83b2d0549f26d05627ee9b198bf31dc" name="libgfxdr0" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="6e954be8a1a241c795325e924e4bd22ca51ffa2b8ea449ecc28a8c3df84cbecf" name="libgit2" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="2.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
</package>
<package pkgid="2862a7d431a5173a138c1ade518fee74f4222d4599b2346561ff25f1eb2d66f8" name="libgit2" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.3.2-3" date="1707307200">- Fix CVE-2024-24577</changelog>
</package>
<package pkgid="c53bb2ce7ef5f94cacb56beda0eb29b10163bf7d15d04063606561a0d95622ff" name="libgit2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="2.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
</package>
<package pkgid="b5ec2a16da8e30546665643f85eb1fc0820b7c825a64796e4710ebae6233c8d6" name="libgit2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.3.2-3" date="1707307200">- Fix CVE-2024-24577</changelog>
</package>
<package pkgid="8bd7d5902da48cdc7925e13396df7f8baf8a904915c4ab9942fc28d5926f36d2" name="libgit2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="2.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
</package>
<package pkgid="27a0f77a7854a2de4038898e6e1935927ebfd20fbe83096ec0a30686b8bd3982" name="libgit2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.3.2-3" date="1707307200">- Fix CVE-2024-24577</changelog>
</package>
<package pkgid="f4d9b0812acaf5acc81ee48badac93fbdba573169c6557a6873de23eee9e82b6" name="libgit2-devel" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="2.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
</package>
<package pkgid="3295929e12cd9fc562fdcfbd544aa72de1e959b9e306378a70f7e5bd92aa71b1" name="libgit2-devel" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.3.2-3" date="1707307200">- Fix CVE-2024-24577</changelog>
</package>
<package pkgid="b5c351b6b60b458c6c8e822ac625fb61f67db3c974f71634ad3f5e957e913742" name="libglusterd0" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="8a65f3f2e544e94b78bcdb37a3b46106388865cf5cc780b5e24760cee3cc7ec0" name="libglusterd0" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="8e60ad6c2f453a591326237821f3c8644ad142834bd78f2d11978f292696a329" name="libglusterfs-devel" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="e65a01aedcee1243b9f0b9555fd0e1d1323a0ca4e38d08966289de3e9776dfde" name="libglusterfs-devel" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="c933cb98946968439c9b1c4a26a6f8623904af622d77049288a69749a1d3ee77" name="libglusterfs0" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="1d6f0b8685a873af165f7be8aac1e0573021865a808ed4b6d6a8c37ee229cce3" name="libglusterfs0" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="c6aa80e44bf0c3a9098a9333e6ee4d148f547a82c60182d776229d908f9a4f8f" name="libgomp" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="aa1d7c4e4a45ad521f668007982bde1901cce3a6fe751d2285012dc69e4e7a45" name="libgomp" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="ddde4487ca1688cfd9695a0b1db0a899f76d75af199f86c257bb4742b64b75dd" name="libgomp" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="2bc2ec7a7b16fd3f4ffa01391c50950d395ff48a8887d5b19527ec074abd01a9" name="libgomp" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="5431ff7ca7fd90b69d228147325c718757e412b6b68858be0abcfa38f8647759" name="libgomp" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="bd930435fed08cfc9bc5c730b11c2c69ecdac254494420af2dc64b9b0d6dfe33" name="libgomp" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="833ebd1d4589d7c5ac34f90d076499d5033494a2eebba496df400f6544d16ba8" name="libicu" arch="x86_64">
  <version epoch="0" ver="72.1" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 72.1-1" date="1668513600">- update to icu4c-72.1</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 72.1-2" date="1668772800">- add loongarch64 support</changelog>
  <changelog author="wuzx &lt;wuzx1226@qq.com&gt; - 72.1-3" date="1669032000">- Add sw64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-4" date="1669032001">- Optimize the patch for add loongarch64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-5" date="1671105600">- delete redundant files</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-6" date="1686657600">- delete taboo words</changelog>
</package>
<package pkgid="471b9f7b88590cb0a08743112a42263ab3fff0689ced4a6602763ec2317cb0b9" name="libicu-devel" arch="x86_64">
  <version epoch="0" ver="72.1" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 72.1-1" date="1668513600">- update to icu4c-72.1</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 72.1-2" date="1668772800">- add loongarch64 support</changelog>
  <changelog author="wuzx &lt;wuzx1226@qq.com&gt; - 72.1-3" date="1669032000">- Add sw64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-4" date="1669032001">- Optimize the patch for add loongarch64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-5" date="1671105600">- delete redundant files</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-6" date="1686657600">- delete taboo words</changelog>
</package>
<package pkgid="6d9c1e007ce2185a33f48f4fa02696344fd2d113919bf8868feebc58e55022e2" name="libitm" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="929fc9441e0564b696c5b72b04c5972ce106fc67b31fc35839b785fa05153d35" name="libitm" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="ee89c6463a233a00cdb04ec2f757321dd04517a72d394495dfa837a697bc8b3e" name="libitm" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="17273042ceb5262361d65b6ef0de10e59497fe1b23ab959208110218043da590" name="libitm" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="78b30d172ba278e3c85f3dc71b32e540cca6cee1697a4912002cb6219cc5032b" name="libitm" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="e76a4cc33bac61d45a0a572cdb82173dd86cb02ce1b760ae69eec95f201031bf" name="libitm" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="c85702f438702d9241b0820695e3c4c24a34c7e4181be49051b02453ebe1bd0c" name="libitm-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="9dc046f676345ae5b8ecccbe79644782dc183ff2768bde52eaa18e88ead3c3f7" name="libitm-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="1415ea7ea7c9317f22d235717fb3fe2009902510999681d88c421db80132543d" name="libitm-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="31de6c84cfdad766e4f7da54c9d11633971b3bd357ed14a4ca16ec6728cab885" name="libitm-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="02a68b12157c5458a1a752b7611dc441e05128d95eb5ed52beb8f6a65c10e990" name="libitm-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="739d9b05b26b8dda7991e2a3c2b41ff1cdfdab94f60dea2fd267177ba7442ddb" name="libitm-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="a9842b1676cbcd9b4e1a7b8c9c05451a61a6837d2a65641a261745902eaf6b17" name="libitm-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="7db437bccaf0fe35ad9a3008cf41c11b3f7ff869ad8c1bf48ec9cf1116503152" name="libitm-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="67697229198b85bc8f1c9c1a5eff5251bb5f08481032b6908dd0c29d466845e9" name="libitm-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="b1d0c90aa287584d1aaa0b5f540f83c2cf95968608062162b4c0524ba96c44d9" name="libitm-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="d93d4cfafcab6c00ec01cfda20079e662e449c78e9ce687eadbcdee6561aa53f" name="libitm-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="6abfa9bd2a22a32c662ee0518f3778b19f9d653df7d63f1894fd8bf1e6dfbf50" name="libitm-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="7f2cf39cc74a704c0c9293c588f53ea9c6fe94b1109fe4f89482d4a00f6501c7" name="libkcapi" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update to 1.3.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-2" date="1643198400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable test suite in check</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-3" date="1645272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix printf usage errors highlighted by covscan</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-4" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete duplicate files from libkcapi-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-5" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control docbook-utils-pdf dependency</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:simplified control macro</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-7" date="1682683200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:calculate hmac file after installing for binary</changelog>
</package>
<package pkgid="37dba5605b8c4213b098849e89a2b9a7464321bd655fc5b6b214f60802df3ae8" name="libkcapi-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update to 1.3.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-2" date="1643198400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable test suite in check</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-3" date="1645272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix printf usage errors highlighted by covscan</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-4" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete duplicate files from libkcapi-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-5" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control docbook-utils-pdf dependency</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:simplified control macro</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-7" date="1682683200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:calculate hmac file after installing for binary</changelog>
</package>
<package pkgid="95a0ff68560db1539fa3f09ab3f20c6c7ea03ca792b490f00020f310858570c3" name="libkcapi-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update to 1.3.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-2" date="1643198400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable test suite in check</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-3" date="1645272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix printf usage errors highlighted by covscan</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-4" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete duplicate files from libkcapi-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-5" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control docbook-utils-pdf dependency</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:simplified control macro</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-7" date="1682683200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:calculate hmac file after installing for binary</changelog>
</package>
<package pkgid="d3b2e8fed03968519c8cd0e65a42131543bfd40bcd9dea4b0cbe624f290a8996" name="libkcapi-devel" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update to 1.3.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-2" date="1643198400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable test suite in check</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-3" date="1645272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix printf usage errors highlighted by covscan</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-4" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete duplicate files from libkcapi-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-5" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control docbook-utils-pdf dependency</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:simplified control macro</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-7" date="1682683200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:calculate hmac file after installing for binary</changelog>
</package>
<package pkgid="d3917ced064ca5e834438950383fc45af21abcac0450faed07cbe6b043ca6eca" name="libkcapi-help" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update to 1.3.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-2" date="1643198400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable test suite in check</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-3" date="1645272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix printf usage errors highlighted by covscan</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-4" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete duplicate files from libkcapi-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-5" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control docbook-utils-pdf dependency</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:simplified control macro</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-7" date="1682683200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:calculate hmac file after installing for binary</changelog>
</package>
<package pkgid="c25bbff305149511f48376f15f7a4a04ede10bccb729d06b5317676d01d0d52f" name="libkcapi-tests" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update to 1.3.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-2" date="1643198400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable test suite in check</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-3" date="1645272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix printf usage errors highlighted by covscan</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-4" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete duplicate files from libkcapi-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-5" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control docbook-utils-pdf dependency</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:simplified control macro</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-7" date="1682683200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:calculate hmac file after installing for binary</changelog>
</package>
<package pkgid="1df1f8575e9a17629d5ad4e910699d973009a41658a4c3ebc15434f40bbdf9a2" name="libknet1" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="8b73aa046a05ee3a54f1f453697adbd5797c60010f40946cd73a232f3a034202" name="libknet1-compress-bzip2-plugin" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="b05738ba434a5bc9d75d6f32b88ea011203e0b5a87ea1111e4d88ec0095e1b7b" name="libknet1-compress-lz4-plugin" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="5486db83106374e584c59ad0ead52145c87f2d459ad9786328e605accb21cd9d" name="libknet1-compress-lzma-plugin" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="040ac656e184e3360138cc097ab89d202d8af92c56985193154dd24420e5c472" name="libknet1-compress-lzo2-plugin" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="55c55ce1cf59d4ae7b4fd6a693551a4c7cccdc5cee1f080c84be00f0042d60b2" name="libknet1-compress-plugins-all" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="055baac14d6c9c71031ca4a545201a18a1b333a3239128d7de52603ffd26f965" name="libknet1-compress-zlib-plugin" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="bf53fd22f7cf8ad4260324cbe3d3b3ed782e971a00c78b5d52c2fbe47a1a17d1" name="libknet1-compress-zstd-plugin" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="ba2d800dd5e388e3199f5efb6f12b68e1bded472e40637e21d7aee9449358e18" name="libknet1-crypto-nss-plugin" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="e9721e5a8dd9a8f86dd7f5536551b6871ce3c50bcecbfa5f46344e7b24df33be" name="libknet1-crypto-openssl-plugin" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="722303ad2eec03e2357ca8892eb597bf524bf6084437648b19837c91ef9bc8b3" name="libknet1-crypto-plugins-all" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="2437ffd07ccc02ff3a707b1708ce64ea82b360eafe1eeced4ca2ce191aaf804b" name="libknet1-devel" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="df855ea9dc26dbbe62e3684e7753b628ace63b3e6dda115b8b173536c1a3fabf" name="libknet1-plugins-all" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="20f93e9b663599850c5815ccd15206766f96d70e8a7e797bfa8dd11135b09fc9" name="libksba" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="3.oe2203sp1"/>
  <changelog author="lirui &lt;lirui130@huawei.com&gt; - 1.5.0-1" date="1611230400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.5.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.6.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-2" date="1666180800">- Type:cve
- ID:CVE-2022-3515
- SUG:NA
- DESC:fix CVE-2022-3515</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-3" date="1671710400">- Type:cve
- ID:CVE-2022-47629
- SUG:NA
- DESC:fix CVE-2022-47629</changelog>
</package>
<package pkgid="ec8b19798f686e9a53dc850a2fa91bb86ba13cf0a1e8dc5ce8fb6f0569b9c42e" name="libksba-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="3.oe2203sp1"/>
  <changelog author="lirui &lt;lirui130@huawei.com&gt; - 1.5.0-1" date="1611230400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.5.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.6.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-2" date="1666180800">- Type:cve
- ID:CVE-2022-3515
- SUG:NA
- DESC:fix CVE-2022-3515</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-3" date="1671710400">- Type:cve
- ID:CVE-2022-47629
- SUG:NA
- DESC:fix CVE-2022-47629</changelog>
</package>
<package pkgid="0e3a076a9566b82632c0012c7ebeeedb9bb433c92ac784d6ab408ae8b2f76738" name="libksba-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="3.oe2203sp1"/>
  <changelog author="lirui &lt;lirui130@huawei.com&gt; - 1.5.0-1" date="1611230400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.5.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.6.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-2" date="1666180800">- Type:cve
- ID:CVE-2022-3515
- SUG:NA
- DESC:fix CVE-2022-3515</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-3" date="1671710400">- Type:cve
- ID:CVE-2022-47629
- SUG:NA
- DESC:fix CVE-2022-47629</changelog>
</package>
<package pkgid="a37d0a096db23203e43ce87292d6c793098a968962f1738a071597dfd3e791ae" name="libksba-devel" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="3.oe2203sp1"/>
  <changelog author="lirui &lt;lirui130@huawei.com&gt; - 1.5.0-1" date="1611230400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.5.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.6.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-2" date="1666180800">- Type:cve
- ID:CVE-2022-3515
- SUG:NA
- DESC:fix CVE-2022-3515</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-3" date="1671710400">- Type:cve
- ID:CVE-2022-47629
- SUG:NA
- DESC:fix CVE-2022-47629</changelog>
</package>
<package pkgid="baaa2c52a0e029f64697f24329cf1fd41343d326ce92b7a324ae2e088fdb7363" name="libksba-help" arch="noarch">
  <version epoch="0" ver="1.6.0" rel="3.oe2203sp1"/>
  <changelog author="lirui &lt;lirui130@huawei.com&gt; - 1.5.0-1" date="1611230400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.5.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.6.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-2" date="1666180800">- Type:cve
- ID:CVE-2022-3515
- SUG:NA
- DESC:fix CVE-2022-3515</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-3" date="1671710400">- Type:cve
- ID:CVE-2022-47629
- SUG:NA
- DESC:fix CVE-2022-47629</changelog>
</package>
<package pkgid="ddbef7336f44702f5cc47c2b6cd19796c1e68aa564151cdfebb4f0fcaf915565" name="libldb" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="2.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 2.1.4-3" date="1626696000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:cancel gdb in buildrequires</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.1.4-4" date="1631016000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:remove rpath of libldb's binary files</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.1-1" date="1639569600">- Type:update
- ID:NA
- SUG:NA
- DESC:update to 2.4.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.1-2" date="1659355200">- Type:CVE
- ID:CVE-2022-32746
- SUG:NA
- DESC:fix CVE-2022-32746</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.1-1" date="1667563200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update libldb version to 2.6.1</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.1-2" date="1680350400">- Type:CVE
- ID:CVE-2023-0614
- SUG:NA
- DESC:fix CVE-2023-0614</changelog>
</package>
<package pkgid="5dc32bd56b18d0e352d563d1ac722f9b7cd07e8bfa6dab96f589eb342384b5ca" name="libldb-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="2.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 2.1.4-3" date="1626696000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:cancel gdb in buildrequires</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.1.4-4" date="1631016000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:remove rpath of libldb's binary files</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.1-1" date="1639569600">- Type:update
- ID:NA
- SUG:NA
- DESC:update to 2.4.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.1-2" date="1659355200">- Type:CVE
- ID:CVE-2022-32746
- SUG:NA
- DESC:fix CVE-2022-32746</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.1-1" date="1667563200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update libldb version to 2.6.1</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.1-2" date="1680350400">- Type:CVE
- ID:CVE-2023-0614
- SUG:NA
- DESC:fix CVE-2023-0614</changelog>
</package>
<package pkgid="7b503b9e2db89c3e0576cfe997dabeaf66b117725f91befc8eac78dc82a55507" name="libldb-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="2.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 2.1.4-3" date="1626696000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:cancel gdb in buildrequires</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.1.4-4" date="1631016000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:remove rpath of libldb's binary files</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.1-1" date="1639569600">- Type:update
- ID:NA
- SUG:NA
- DESC:update to 2.4.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.1-2" date="1659355200">- Type:CVE
- ID:CVE-2022-32746
- SUG:NA
- DESC:fix CVE-2022-32746</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.1-1" date="1667563200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update libldb version to 2.6.1</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.1-2" date="1680350400">- Type:CVE
- ID:CVE-2023-0614
- SUG:NA
- DESC:fix CVE-2023-0614</changelog>
</package>
<package pkgid="ded2e2a804f25289aca4d8f5ab3c4549f5ed56eb788852a9561c476a73787c5b" name="libldb-devel" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="2.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 2.1.4-3" date="1626696000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:cancel gdb in buildrequires</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.1.4-4" date="1631016000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:remove rpath of libldb's binary files</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.1-1" date="1639569600">- Type:update
- ID:NA
- SUG:NA
- DESC:update to 2.4.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.1-2" date="1659355200">- Type:CVE
- ID:CVE-2022-32746
- SUG:NA
- DESC:fix CVE-2022-32746</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.1-1" date="1667563200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update libldb version to 2.6.1</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.1-2" date="1680350400">- Type:CVE
- ID:CVE-2023-0614
- SUG:NA
- DESC:fix CVE-2023-0614</changelog>
</package>
<package pkgid="27706c5fc2c1f5f49e033c3203bdf2a12404d4608121965da262f9dfe84ae401" name="libldb-help" arch="noarch">
  <version epoch="0" ver="2.6.1" rel="2.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 2.1.4-3" date="1626696000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:cancel gdb in buildrequires</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.1.4-4" date="1631016000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:remove rpath of libldb's binary files</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.1-1" date="1639569600">- Type:update
- ID:NA
- SUG:NA
- DESC:update to 2.4.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.1-2" date="1659355200">- Type:CVE
- ID:CVE-2022-32746
- SUG:NA
- DESC:fix CVE-2022-32746</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.1-1" date="1667563200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update libldb version to 2.6.1</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.1-2" date="1680350400">- Type:CVE
- ID:CVE-2023-0614
- SUG:NA
- DESC:fix CVE-2023-0614</changelog>
</package>
<package pkgid="77ba1bba6a8017b2168c6d5886b5b6a8c01c5c57248a483e2fdb33621a0b291f" name="liblouis" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
</package>
<package pkgid="3a92d27177eb07cb4a10b7a1b75b54e2c6ddef75602238d4493d082232d82057" name="liblouis" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.0-6" date="1702296000">- Fix CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768</changelog>
</package>
<package pkgid="b86fe05b91fca05175b3b9f3834bfff4f13710364e3ed0799a4e76c341edbba1" name="liblouis-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
</package>
<package pkgid="c730935eb8f630d0006988be4d6f7d870048325282a3507c7dc2d334c7563813" name="liblouis-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.0-6" date="1702296000">- Fix CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768</changelog>
</package>
<package pkgid="c0e8a475277521e04ca7f69d5f435cf9f72679b5dc41e27ea3b0650a226ecf35" name="liblouis-debugsource" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
</package>
<package pkgid="199f273aea57d98fb0657691ebd4ea8a860436583c204965fe344dd91341db55" name="liblouis-debugsource" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.0-6" date="1702296000">- Fix CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768</changelog>
</package>
<package pkgid="46f9615b07c1de0c5e2fe883eec0c2c0a9f42500738f76d282e1e712b61ae3e3" name="liblouis-devel" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
</package>
<package pkgid="e5ec5d52d73870a202dee442a40ad36392581c9dc6c9e2092ca8db3dad109d0c" name="liblouis-devel" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.0-6" date="1702296000">- Fix CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768</changelog>
</package>
<package pkgid="e1d947e17b8684935c121ea33cf5e9a44250345a4ee38f24f8500005cc053458" name="liblouis-help" arch="noarch">
  <version epoch="0" ver="3.7.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
</package>
<package pkgid="8d91d1e3f57f010a51936f5b30e70eef0b92b5c0996c377de746a43172f03692" name="liblouis-help" arch="noarch">
  <version epoch="0" ver="3.7.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.0-6" date="1702296000">- Fix CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768</changelog>
</package>
<package pkgid="14cca5d90e28795d94f722eb73a3b608b1da794915acbf05e998979b31a739af" name="liblouis-utils" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
</package>
<package pkgid="e76b491b00c0c253e94b6c96b7e88aee7497033933ec549feb01f6b9d07cb090" name="liblouis-utils" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.0-6" date="1702296000">- Fix CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768</changelog>
</package>
<package pkgid="4be53f0fd5f0009aa9bc36f9d22a033d689c939fb27cd15f16c3c37dfd41a04e" name="liblsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="d6ec8e56a3a0186ecffd74f40a8530abe778c24b07be71cb443db8d3936f4eb3" name="liblsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="f3c705adab43b29c139658580f9d806d26cd2226bd69413007a8ef2de5c6491f" name="liblsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="cb4e787a4fb5a81ac04fa328034d521773c27c673c4eb11aa123f4fa24862eec" name="liblsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="2fc3f802aff22323447515b69c272a51794061fae38cb682554437af11deb103" name="liblsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="c0a6b2df1db62b3a956d1a3130f282311f5897ef0d9993667e4b0dfc57e5ecc1" name="liblsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="7c1192b44c3e114afbd2bc68624dce8557fd22956fea86d23b6c44778165fa55" name="liblsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="803bdba7b9a20c83c34cbe609f75f329c1d939ea8f1000e5ef8a680e3040f860" name="liblsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="07249e38add75a371bd4305d63a734f76f5babc787730ab51d06adc759b75a76" name="liblsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="5a0982f1b067f5173b1057e87df4cc3fa84c27f7b1a55d778cbed5dc577f9925" name="liblsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="94e5646be8bae9071598ca1f38d279019181c16035da31e2792f60e7bcd9b08c" name="liblsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="a65b9e5d036610941ac4af52f63cc3a71b4f978e3c2a3abd5e45f2973b8181c5" name="liblsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="553eefa2c29435aeed377a120de5ef0c8370b0a3cbf15a6b844b547b7814b077" name="libmicrohttpd" arch="x86_64">
  <version epoch="1" ver="0.9.75" rel="4.oe2203sp1"/>
  <changelog author="caodongxia&lt;caodongxia@huawei.com&gt; - 0.9.59-5" date="1628164800">- Fix libmicrohttpd-tutorial info</changelog>
  <changelog author="xigaoxinyan&lt;xigaoxinyan@huawei.com&gt; - 0.9.75-1" date="1642161600">- update to 0.9.75</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:0.9.75-2" date="1659700800">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1:0.9.75-3" date="1661601600">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:0.9.75-4" date="1678708800">- Fix CVE-2023-27371</changelog>
</package>
<package pkgid="97ab7634e0a82aa709e9f68f2fd16355d8017f289e7e3653c816b6fdfa6969d9" name="libmicrohttpd-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.9.75" rel="4.oe2203sp1"/>
  <changelog author="caodongxia&lt;caodongxia@huawei.com&gt; - 0.9.59-5" date="1628164800">- Fix libmicrohttpd-tutorial info</changelog>
  <changelog author="xigaoxinyan&lt;xigaoxinyan@huawei.com&gt; - 0.9.75-1" date="1642161600">- update to 0.9.75</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:0.9.75-2" date="1659700800">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1:0.9.75-3" date="1661601600">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:0.9.75-4" date="1678708800">- Fix CVE-2023-27371</changelog>
</package>
<package pkgid="25c2617fe84b4abe8c612c9af676292770639604b98d0df747125dedb0fe9f9d" name="libmicrohttpd-debugsource" arch="x86_64">
  <version epoch="1" ver="0.9.75" rel="4.oe2203sp1"/>
  <changelog author="caodongxia&lt;caodongxia@huawei.com&gt; - 0.9.59-5" date="1628164800">- Fix libmicrohttpd-tutorial info</changelog>
  <changelog author="xigaoxinyan&lt;xigaoxinyan@huawei.com&gt; - 0.9.75-1" date="1642161600">- update to 0.9.75</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:0.9.75-2" date="1659700800">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1:0.9.75-3" date="1661601600">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:0.9.75-4" date="1678708800">- Fix CVE-2023-27371</changelog>
</package>
<package pkgid="aad15f36307d56c5353b81dfb41522670f3568dbdafcb0ff84f37d4057cf30a6" name="libmicrohttpd-devel" arch="x86_64">
  <version epoch="1" ver="0.9.75" rel="4.oe2203sp1"/>
  <changelog author="caodongxia&lt;caodongxia@huawei.com&gt; - 0.9.59-5" date="1628164800">- Fix libmicrohttpd-tutorial info</changelog>
  <changelog author="xigaoxinyan&lt;xigaoxinyan@huawei.com&gt; - 0.9.75-1" date="1642161600">- update to 0.9.75</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:0.9.75-2" date="1659700800">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1:0.9.75-3" date="1661601600">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:0.9.75-4" date="1678708800">- Fix CVE-2023-27371</changelog>
</package>
<package pkgid="d3d67c66242154dc298f3044e0d1193649ab293cabe571ddb71c4c66d6066450" name="libmicrohttpd-help" arch="noarch">
  <version epoch="1" ver="0.9.75" rel="4.oe2203sp1"/>
  <changelog author="caodongxia&lt;caodongxia@huawei.com&gt; - 0.9.59-5" date="1628164800">- Fix libmicrohttpd-tutorial info</changelog>
  <changelog author="xigaoxinyan&lt;xigaoxinyan@huawei.com&gt; - 0.9.75-1" date="1642161600">- update to 0.9.75</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:0.9.75-2" date="1659700800">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1:0.9.75-3" date="1661601600">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:0.9.75-4" date="1678708800">- Fix CVE-2023-27371</changelog>
</package>
<package pkgid="3a4459e3f4c2d89c526d63e56ab2f0a8c11115d256646230a0841e7bad061136" name="libmilter" arch="x86_64">
  <version epoch="0" ver="8.17.1" rel="8.oe2203sp1"/>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 8.17.1-5" date="1665576000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix newaliases command error and postfix service start execption after sendmail install</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 8.17.1-6" date="1670932800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix sendmail.pem unsafe</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 8.17.1-7" date="1678449600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: modify certificate validity period</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 8.17.1-8" date="1716379200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix config changes</changelog>
</package>
<package pkgid="6611a05930b3ec0c3ee9b37979f64674efc32e970d36e279b0f48874c55e8e91" name="libmilter-devel" arch="x86_64">
  <version epoch="0" ver="8.17.1" rel="8.oe2203sp1"/>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 8.17.1-5" date="1665576000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix newaliases command error and postfix service start execption after sendmail install</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 8.17.1-6" date="1670932800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix sendmail.pem unsafe</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 8.17.1-7" date="1678449600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: modify certificate validity period</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 8.17.1-8" date="1716379200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix config changes</changelog>
</package>
<package pkgid="a5f3a5a29f0aedaf2aece3d071a70730f305c74495a168cb976a3f58d0a82aa1" name="libmount" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="28.oe2203sp1"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-19" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
       backport-write-correctly-handle-wide-characters.patch
       backport-wall-convert-homebrew-buffering-to-open_memstream.patch
       backport-wall-use-fputs_careful.patch
       backport-hexdump-parse-handle-truncated-format-pattern.patch
       backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
       backport-lscpu-fix-p-output-all-caches-delimiter.patch
       backport-add-return-in-supam_conv-function.patch
       backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
       backport-sulogin-ignore-none-existing-console-devices.patch
       backport-sulogin-fix-KDGKBMODE-ifdef.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-20" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
       backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-21" date="1691064000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libblkid-jfs-avoid-undefined-shift.patch
       backport-cfdisk-add-hint-about-labels-for-bootable-flag.patch
       backport-logger-initialize-socket-credentials-contol-union.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-22" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-column-fix-buffer-overflow-when-l-specified.patch
       backport-column-fix-greedy-mode-on-l.patch
       backport-column-fix-memory-leak.patch
       backport-column-fix-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-23" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-scriptreplay-support-ctrl-s-and-ctrl-g.patch
       backport-login-use-correct-terminal-fd-during-setup.patch
       backport-login-prevent-undefined-ioctl-and-tcsetattr-calls.patch
       backport-libblkid-avoid-memory-leak-of-cachefile-path.patch
       backport-more-avoid-out-of-bound-access.patch
       backport-lslogins-fix-realloc-loop-allocation-size.patch
       backport-ldattach-don-t-call-exit-from-signal-handler.patch
       backport-libblkid-ntfs-validate-that-sector_size-is-a-power-o.patch
       backport-blkid-fix-call-to-err_exclusive_options.patch
       backport-libblkid-reset-errno-before-calling-probefuncs.patch
       backport-lib-path-fix-possible-out-of-boundary-access.patch
       backport-libmount-improve-mnt_table_next_child_fs.patch
       backport-libmount-fix-possible-NULL-dereference-coverity-scan.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-24" date="1705406400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
	backport-libsmartcols-flush-correct-stream.patch
	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
	backport-cal-avoid-out-of-bound-write.patch
	backport-libfdisk-sun-properly-initialize-partition-data.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-25" date="1708344000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:solve the issue of ext4 is incorrectly probed as drbd
        [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
        backport-libblkid-probe-read-data-in-chunks.patch
        backport-libblkid-avoid-aligning-out-of-probing-area.patch
        backport-libblkid-drbd-validate-zero-padding.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-26" date="1709899200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
       backport-libblkid-hfsplus-reduce-false-positive.patch
       backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
       backport-libblkid-drbd-reduce-false-positive.patch
       backport-lib-cpuset-exit-early-from-cpulist_parse.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-27" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
       backport-libblkid-Check-offset-in-LUKS2-header.patch
       backport-more-fix-poll-use.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-28085
- SUG:NA
- DESC:fix CVE-2024-28085</changelog>
</package>
<package pkgid="771c6e4aef1e94b791997baab59ee47b25fdeef63ccb51f975b88c119960bb53" name="libmozjs-91-0" arch="x86_64">
  <version epoch="0" ver="91.6.0" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 91.6.0-2" date="1648123200">- remove .oe2203sp1</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 91.6.0-3" date="1693310400">- add support for loongarch64 and sw_64</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-4" date="1711022400">- fix CVEs</changelog>
</package>
<package pkgid="55ca9f57c1ebb04a0d156d1bd2ceb26804757d138d6386b1110162c0afae5242" name="libmozjs-91-0" arch="x86_64">
  <version epoch="0" ver="91.6.0" rel="5.oe2203sp1"/>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 91.6.0-3" date="1693310400">- add support for loongarch64 and sw_64</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-4" date="1711022400">- fix CVEs</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-5" date="1717675200">- fix CVEs</changelog>
</package>
<package pkgid="3c29230f3c96c3f5a9008b25a7691e0c2e57767d6708880bf9fcb75bfff7e7c4" name="libndp" arch="x86_64">
  <version epoch="0" ver="1.8" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.8-2" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for local rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.8-3" date="1718107200">- Type:CVE
- ID:CVE-2024-5564
- SUG:NA
- DESC:fix CVE-2024-5564</changelog>
</package>
<package pkgid="956a312a00c4f2760aeb13ab556f9bb647b70b294cf20efea83b40c534db0a80" name="libndp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.8-2" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for local rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.8-3" date="1718107200">- Type:CVE
- ID:CVE-2024-5564
- SUG:NA
- DESC:fix CVE-2024-5564</changelog>
</package>
<package pkgid="77a7ef8a382f7f36ba93b39a2a15c4ba81b96ec4465813fd7b574484f7779ff7" name="libndp-debugsource" arch="x86_64">
  <version epoch="0" ver="1.8" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.8-2" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for local rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.8-3" date="1718107200">- Type:CVE
- ID:CVE-2024-5564
- SUG:NA
- DESC:fix CVE-2024-5564</changelog>
</package>
<package pkgid="48d575c170fd953846743d68dad551c515265cb4587e498b82178fb8754fea5c" name="libndp-devel" arch="x86_64">
  <version epoch="0" ver="1.8" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.8-2" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for local rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.8-3" date="1718107200">- Type:CVE
- ID:CVE-2024-5564
- SUG:NA
- DESC:fix CVE-2024-5564</changelog>
</package>
<package pkgid="adc3513c62f8ac6d356c1de3414b39993b67a2762f680ff61a9e1a845c38e626" name="libndp-help" arch="x86_64">
  <version epoch="0" ver="1.8" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.8-2" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for local rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.8-3" date="1718107200">- Type:CVE
- ID:CVE-2024-5564
- SUG:NA
- DESC:fix CVE-2024-5564</changelog>
</package>
<package pkgid="2b094e7c426909d61621b1a175d6e1d67001a4e9a5439f4a624ab1f5413b24bb" name="libnetfilter_conntrack" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.0.8-3" date="1663070400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.0.8-4" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove filter tests</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-5" date="1669636800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-6" date="1698408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync uapi header with nf next</changelog>
</package>
<package pkgid="5ea6884f7a454d529b3102948b61abd863de3081e601fae85615a4c8558f9553" name="libnetfilter_conntrack-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.0.8-3" date="1663070400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.0.8-4" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove filter tests</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-5" date="1669636800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-6" date="1698408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync uapi header with nf next</changelog>
</package>
<package pkgid="7313773d90271edc90571fd31f677f2fea6f48ae95f45dd27dd45b6645d5a1a0" name="libnetfilter_conntrack-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.0.8-3" date="1663070400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.0.8-4" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove filter tests</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-5" date="1669636800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-6" date="1698408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync uapi header with nf next</changelog>
</package>
<package pkgid="a9114c55d52d8c7b07eeee7ef12243c3a40ee782435f15b0a524156c41169ed8" name="libnetfilter_conntrack-devel" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.0.8-3" date="1663070400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.0.8-4" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove filter tests</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-5" date="1669636800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-6" date="1698408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync uapi header with nf next</changelog>
</package>
<package pkgid="de94c9cda457bb9437d78e09c7e0a6699b66f1f1bab237bfba285adef12761d6" name="libnghttp2" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="d0286bc9d64c3dba3ccaa779e77e186ec0015688f54653a15b00a3a67ed8099c" name="libnghttp2" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
</package>
<package pkgid="d1b7c8586e40590ecbff4db2fee072bbfb214642d64909dd4d60ff78603cad82" name="libnghttp2" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="5.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
</package>
<package pkgid="e4fdf66fdd1bceabb072a73665a3d82cfb41a471506f2fa762df89bf4a687d6e" name="libnghttp2" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.46.0-6" date="1712491200">- Type:CVE
- ID:CVE-2024-28182
- SUG:restart
- DESC:fix CVE-2024-28182</changelog>
</package>
<package pkgid="db0c2c8bcb7d2d9724ecc1e72ab142192b0fbca4adea4df98a3f3062e96e0df9" name="libnghttp2-devel" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="8838552752dd9704ffa88e363ada5a33914d955b96c11d880d914915f9ab1bd0" name="libnghttp2-devel" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
</package>
<package pkgid="0f5cbeb46ca2a6c4102b49934a2c71a36c9fa3d10ac011caf7b7c2528c6a067b" name="libnghttp2-devel" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="5.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
</package>
<package pkgid="5f40405123840081121c94bed4475fdcd87c72fc87bb2da7d7a8fbfba7df98bf" name="libnghttp2-devel" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.46.0-6" date="1712491200">- Type:CVE
- ID:CVE-2024-28182
- SUG:restart
- DESC:fix CVE-2024-28182</changelog>
</package>
<package pkgid="f21e0faf463c58b9613d135a40d3c9d3dd41e41905125dceaae9894c4ade8ef4" name="libnozzle1" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="0bc469da35d4a057e1491d4fc3c81259a1b9c33d3d37bb25852277ab8c8d9549" name="libnozzle1-devel" arch="x86_64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="5d51da60064c3b6e4a04df67e86bc3f41a942a33b6901d3460733c65ca331396" name="libnsl" arch="x86_64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="30bcc3f44234a2e29b59fd35beab453629e13b7ef6d28fd328a278acdfe85baa" name="libnsl" arch="x86_64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="abea5e3eb8cbf9dc947d26741a4bcfd9a9892bd635ed2c0547801fd8499241d3" name="libnsl" arch="x86_64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="133f5692373187cb1eec62c2c88a18e4bff57c98d2585ce4c8a725af3458682f" name="libnsl" arch="x86_64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="582e3bf6c9da37eb2af1b9b14f6bdae402a3d14d006c320514e3a19e4e200a03" name="libnsl" arch="x86_64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="d62cd5a57a8ab067e8be93cb4320541ed608f3af1950761717f03484e5677a96" name="libnsl" arch="x86_64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="1a3cc3669e0d4ae891bdf83e412b43d64a465e5a195ad8bdbe2dacabd4ba66af" name="libobjc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="0ae0200890c49978f94fd404c76c32b6aa387a25660207dd8718ea13c4ba0a66" name="libobjc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="f610dec5c875ad4f0d181076ed2a1d629af106e1faf27e8f6e3438af70b6c623" name="libobjc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="60992931ba1b91813727059b1cc5d7d44ebcca6f8c2b5e63e9d9e28c5e40f66a" name="libobjc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="505e8962881faa91a71bb541c824430965763435a0fcfe4298aaf46ea730fadb" name="libobjc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="31a6282fad59961770179f43865023212de59c60b36e2abf0f8302a0101ad0a2" name="libobjc" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="eccd83ce7748192b08544ac4d78e401de09c06d1afb23ec3eb5ad604ff88ae01" name="libpq" arch="x86_64">
  <version epoch="0" ver="13.12" rel="1.oe2203sp1"/>
  <changelog author="yangweidong &lt;yangweidong9@huawei.com&gt; - 11.16-1" date="1652961600">- Upgrade libpq to 11.16, fix CVES: CVE-2021-32028 CVE-2021-3677 CVE-2021-23222</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 13.7-1" date="1655121600">- upgrade libpq to 13.7,fix CVE-2021-32027,CVE-2022-1552</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 13.7-2" date="1669896000">- add loongarch support</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 13.7-3" date="1692014400">- Fix sw_64 build error</changelog>
  <changelog author="ZhengZhenyu &lt;zhengzhenyu@openeuler.sh&gt; - 13.12-1" date="1693483200">- Bump to 13.12 to fix CVEs</changelog>
</package>
<package pkgid="4fc380ffd251d02d918b5285d369a98f8db50cc9624774eb8e6ac29877391d33" name="libpq-debuginfo" arch="x86_64">
  <version epoch="0" ver="13.12" rel="1.oe2203sp1"/>
  <changelog author="yangweidong &lt;yangweidong9@huawei.com&gt; - 11.16-1" date="1652961600">- Upgrade libpq to 11.16, fix CVES: CVE-2021-32028 CVE-2021-3677 CVE-2021-23222</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 13.7-1" date="1655121600">- upgrade libpq to 13.7,fix CVE-2021-32027,CVE-2022-1552</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 13.7-2" date="1669896000">- add loongarch support</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 13.7-3" date="1692014400">- Fix sw_64 build error</changelog>
  <changelog author="ZhengZhenyu &lt;zhengzhenyu@openeuler.sh&gt; - 13.12-1" date="1693483200">- Bump to 13.12 to fix CVEs</changelog>
</package>
<package pkgid="0b20ea11201d5920ee6286bc932feaf77d7620ea066ef728140d9672b3bd87c9" name="libpq-debugsource" arch="x86_64">
  <version epoch="0" ver="13.12" rel="1.oe2203sp1"/>
  <changelog author="yangweidong &lt;yangweidong9@huawei.com&gt; - 11.16-1" date="1652961600">- Upgrade libpq to 11.16, fix CVES: CVE-2021-32028 CVE-2021-3677 CVE-2021-23222</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 13.7-1" date="1655121600">- upgrade libpq to 13.7,fix CVE-2021-32027,CVE-2022-1552</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 13.7-2" date="1669896000">- add loongarch support</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 13.7-3" date="1692014400">- Fix sw_64 build error</changelog>
  <changelog author="ZhengZhenyu &lt;zhengzhenyu@openeuler.sh&gt; - 13.12-1" date="1693483200">- Bump to 13.12 to fix CVEs</changelog>
</package>
<package pkgid="8f8c7026c7a19bb335c7d903bd4444306ae9bfa22965d86290ab52e3f752de47" name="libpq-devel" arch="x86_64">
  <version epoch="0" ver="13.12" rel="1.oe2203sp1"/>
  <changelog author="yangweidong &lt;yangweidong9@huawei.com&gt; - 11.16-1" date="1652961600">- Upgrade libpq to 11.16, fix CVES: CVE-2021-32028 CVE-2021-3677 CVE-2021-23222</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 13.7-1" date="1655121600">- upgrade libpq to 13.7,fix CVE-2021-32027,CVE-2022-1552</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 13.7-2" date="1669896000">- add loongarch support</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 13.7-3" date="1692014400">- Fix sw_64 build error</changelog>
  <changelog author="ZhengZhenyu &lt;zhengzhenyu@openeuler.sh&gt; - 13.12-1" date="1693483200">- Bump to 13.12 to fix CVEs</changelog>
</package>
<package pkgid="29542e779bd8fa54b10dc1083f586ef616bb51997f753177cfe413a7d9054d5a" name="libquadmath" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="1f17e31912084534b22c555ff34fc36d56f9b6b69f1abe5279223ba18ec6164c" name="libquadmath" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="f85c1b320391d77c9978cba9bce4765848be9a97391b622d90efdbdb8c4a17ce" name="libquadmath" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="7b2b10fee0c78ad96eaec397808871381d3a286d214dd534614f8b0cb6d9a495" name="libquadmath" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="201be2487ffa9ffa36249938ac24d81ff30e39e6d0d928abd0d56dce220d5021" name="libquadmath" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="2879e5f0067b554d9a447785be17f83ec15719c47b53aae89a54cb2f7e2da88e" name="libquadmath" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="4a1ddee256bba023751a9a511b0cf1528982fefc18dedd34fe41589bfffbbf22" name="libquadmath-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="7290f6cbfc1b3b66a5e5aa690976b3a88a3e08be6a8e06a204bf1f2d2257b23e" name="libquadmath-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="b0f92f6b4b101048fee5290d8f497a48ca45b5c0f7db18be19dd203699c6548f" name="libquadmath-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="1f58671048fe89fb9f2cae20b03d590ff02aab9974829c3ee5c11e6455c9c8a5" name="libquadmath-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="d7d548401eb8263fd1eeceed4a52f6447f41bb3da9ee1928597b242066224c6d" name="libquadmath-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="c84e82f247683099a977a1bf283f7269462b497497df552117ec2459547b076f" name="libquadmath-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="cf819a9f25816eddce585c803d74050a0b59f0883adc47c61708c9f8de04abf2" name="libquadmath-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="249225b8131fd9f99cb0db0d4288b34fbb8d691db082690572f24b98413b5fdf" name="libquadmath-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="e2d80d1235aa3a4187e0c2801fc9e8598585123799b0be19efc02ceb8a9f3b54" name="libquadmath-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="e9ba78b13c046f6b9a27af8d6891dcf74284c7b9dc8bb9d8f1d525480424c06a" name="libquadmath-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="2c4b10d33fc0c3a42c6ccde4f87725f07e25a6a6dd500dc9e8a42731c808d1ad" name="libquadmath-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="6a3632d291b0a67d6d3287cc6df8ab8c52d02adca7e2278af93ed02c60990978" name="libquadmath-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="7443159fef80024d48ff6b24a278af0371c40e6f1de23984670bbaaaae605c46" name="librabbitmq" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="9.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.9.0-6" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 0.9.0-7" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix instructions for default build</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 0.9.0-8" date="1673092800">- OpenSSL should ignore missing config file</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.9.0-9" date="1688126400">- Fix CVE-2023-35789</changelog>
</package>
<package pkgid="a363482aedbf1dcb88d68b89ad9710cf35dc56a2f72396f31a6abd865e40d225" name="librabbitmq-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="9.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.9.0-6" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 0.9.0-7" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix instructions for default build</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 0.9.0-8" date="1673092800">- OpenSSL should ignore missing config file</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.9.0-9" date="1688126400">- Fix CVE-2023-35789</changelog>
</package>
<package pkgid="c0c3763770f03ee56e12035d0796a92d73136b25f1d3d1477eadd07da2d3b8ee" name="librabbitmq-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="9.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.9.0-6" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 0.9.0-7" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix instructions for default build</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 0.9.0-8" date="1673092800">- OpenSSL should ignore missing config file</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.9.0-9" date="1688126400">- Fix CVE-2023-35789</changelog>
</package>
<package pkgid="58b1dba8937501158150e5a2609c6fd1e7f46ac6537c15f8cc2b4dfcf95e6746" name="librabbitmq-devel" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="9.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.9.0-6" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 0.9.0-7" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix instructions for default build</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 0.9.0-8" date="1673092800">- OpenSSL should ignore missing config file</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.9.0-9" date="1688126400">- Fix CVE-2023-35789</changelog>
</package>
<package pkgid="169ef6623e8ebbd4f9e554e29b38a59ce3fbc5901725a1479b7b2b19e2ad3dad" name="librabbitmq-help" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="9.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.9.0-6" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 0.9.0-7" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix instructions for default build</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 0.9.0-8" date="1673092800">- OpenSSL should ignore missing config file</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.9.0-9" date="1688126400">- Fix CVE-2023-35789</changelog>
</package>
<package pkgid="f7edf56fc63157ff56462b3b084734331090d8cdf48ca85635b32c857d10d4e2" name="librados-devel" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="ea2871f0a2da48e2c3d70e3818b0ce2bfab2bcea051ffbe7e5f2d066aa6d23a4" name="librados-devel" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="457785887f5b6fb1cc473909c493a2293d818216bbceafae424db644f20dde3d" name="librados2" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="d09cc8282242e70d13585ec1d3ba41c7160ff3e78f7ae017e30f7847309a0f70" name="librados2" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="e7ecf59ad0f26ef9e0dd62dcdf8790e4fe8037ae65a1cf2cb23c35cfd9c9083f" name="libradospp-devel" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="82714b867b313a63f8ccfcb403888ffeca5856e6c838205915189cfa1c387cf9" name="libradospp-devel" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="9932b1221793f2792a9c52e0cf0e4a2ec40b72f2dccc767e44cb09057d77bec4" name="libradosstriper-devel" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="20a3d12b6eccc1f709421258ec5d00626d48467af3ad8028c06635e60427a663" name="libradosstriper-devel" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="bf0533fd530be580c05ee8a191e6c201c1f43564284bfb8f41272a3ef5087971" name="libradosstriper1" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="8e3a9f8e89e699cf190b6e5f4bcd0e64b269ebb43d9e2f6619af4d3274a5e857" name="libradosstriper1" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="be471876ea29c3593f35094c04058ee0cba66900dc142d6e8cd6a6c1b7a7627f" name="librbd-devel" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="36b1dfcaa5f217bb4ca8afe64ebede13f475ef5873648c4b73a3fe8241e9ef67" name="librbd-devel" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="a6414674db824a57ba01314707f45c1ab7d8bbe6e63e901684dde22b4a9ab8ef" name="librbd1" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="0725abaf5e154466422b144700f72ecfd81059db31a9b709d388796754b52b7a" name="librbd1" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="7ddaa318a5223e55876fe1a9911565b3d764ccbe68c9cd909f3823df2e01b795" name="libreswan" arch="x86_64">
  <version epoch="0" ver="4.11" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 4.5-1" date="1641988800">- Update to 4.5</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
</package>
<package pkgid="ee3c89f263f4c857d7f7cc9ab6d62bca27a235716a9365f29e550e679d72ed4f" name="libreswan" arch="x86_64">
  <version epoch="0" ver="4.12" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 4.5-1" date="1641988800">- Update to 4.5</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.12-1" date="1691841600">- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712</changelog>
</package>
<package pkgid="576e84473b9006547a648f1393eebcd97a58082a039780a91e491d952660cea3" name="libreswan" arch="x86_64">
  <version epoch="0" ver="4.14" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.12-1" date="1691841600">- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 4.12-2" date="1692014400">- Add loongarch64 support</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 4.12-3" date="1694433600">- Fix build error of 3000-Add-loongarch64-support.patch</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.14-1" date="1711454400">- Upgrade to 4.14 for fix CVE-2024-2357</changelog>
</package>
<package pkgid="5b1962ca97c22a8c8bdb79f2d208bd58488f7a60e770ca2cf1c1f8264c7c7711" name="libreswan" arch="x86_64">
  <version epoch="0" ver="4.15" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
  <changelog author="yangbo &lt;yangbo1@xfusion.com&gt; - 4.11-2" date="1686744000">- Fix '\n' of the linux_variant</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.12-1" date="1691841600">- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 4.12-2" date="1692014400">- Add loongarch64 support</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 4.12-3" date="1694433600">- Fix build error of 3000-Add-loongarch64-support.patch</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.14-1" date="1711454400">- Upgrade to 4.14 for fix CVE-2024-2357</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.15-1" date="1714478400">- Update to 4.15 for fix CVE-2024-3652</changelog>
</package>
<package pkgid="1876abffd5968b36708afb0ca751f4341fe8bfc94803a5652413ad1db9e78b63" name="libreswan" arch="x86_64">
  <version epoch="0" ver="4.5" rel="3.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 4.5-1" date="1641988800">- Update to 4.5</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
</package>
<package pkgid="5cb2f57a1d88e7da3dffc6fc55dbd362fa243ef077705c40e3a6591621627758" name="libreswan-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 4.5-1" date="1641988800">- Update to 4.5</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
</package>
<package pkgid="7a40d6fc9d301c73723b4f22efd18a621e0e7e046ada93f84067349224916a33" name="libreswan-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.12" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 4.5-1" date="1641988800">- Update to 4.5</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.12-1" date="1691841600">- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712</changelog>
</package>
<package pkgid="d808ffa55bcdc1ccb87bd576902fc13d29b3ea23bc62582009b28603859efc88" name="libreswan-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.12-1" date="1691841600">- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 4.12-2" date="1692014400">- Add loongarch64 support</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 4.12-3" date="1694433600">- Fix build error of 3000-Add-loongarch64-support.patch</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.14-1" date="1711454400">- Upgrade to 4.14 for fix CVE-2024-2357</changelog>
</package>
<package pkgid="2199779741950ccb0792f68e841d18342a68828b6c5a3f77883bf04e30408faf" name="libreswan-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.15" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
  <changelog author="yangbo &lt;yangbo1@xfusion.com&gt; - 4.11-2" date="1686744000">- Fix '\n' of the linux_variant</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.12-1" date="1691841600">- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 4.12-2" date="1692014400">- Add loongarch64 support</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 4.12-3" date="1694433600">- Fix build error of 3000-Add-loongarch64-support.patch</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.14-1" date="1711454400">- Upgrade to 4.14 for fix CVE-2024-2357</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.15-1" date="1714478400">- Update to 4.15 for fix CVE-2024-3652</changelog>
</package>
<package pkgid="4da4d0672ff59ac60f5c65f40915a78e2faddce5e4cebe76b45cca64de61c286" name="libreswan-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5" rel="3.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 4.5-1" date="1641988800">- Update to 4.5</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
</package>
<package pkgid="0c02571a59df53ee9f6f2cc76a12721a955628c12413eae279d975fd32798c20" name="libreswan-debugsource" arch="x86_64">
  <version epoch="0" ver="4.11" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 4.5-1" date="1641988800">- Update to 4.5</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
</package>
<package pkgid="72cacbd43c76d37d471055e9d762aeedb5f778d334d2753bef7db2dbc099271b" name="libreswan-debugsource" arch="x86_64">
  <version epoch="0" ver="4.12" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 4.5-1" date="1641988800">- Update to 4.5</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.12-1" date="1691841600">- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712</changelog>
</package>
<package pkgid="39422c6605c8ea14b8c1145f2f65de81068118962d8ee8bf88ac3fe72543675f" name="libreswan-debugsource" arch="x86_64">
  <version epoch="0" ver="4.14" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.12-1" date="1691841600">- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 4.12-2" date="1692014400">- Add loongarch64 support</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 4.12-3" date="1694433600">- Fix build error of 3000-Add-loongarch64-support.patch</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.14-1" date="1711454400">- Upgrade to 4.14 for fix CVE-2024-2357</changelog>
</package>
<package pkgid="08cbf3f39dde719f8012b986be0cf480f3661cc44b259873fb015675676ff54c" name="libreswan-debugsource" arch="x86_64">
  <version epoch="0" ver="4.15" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
  <changelog author="yangbo &lt;yangbo1@xfusion.com&gt; - 4.11-2" date="1686744000">- Fix '\n' of the linux_variant</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.12-1" date="1691841600">- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 4.12-2" date="1692014400">- Add loongarch64 support</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 4.12-3" date="1694433600">- Fix build error of 3000-Add-loongarch64-support.patch</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.14-1" date="1711454400">- Upgrade to 4.14 for fix CVE-2024-2357</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.15-1" date="1714478400">- Update to 4.15 for fix CVE-2024-3652</changelog>
</package>
<package pkgid="f900306bef884ca52c714eca4418d38d3031b10a93bb4f4715925e40b562806b" name="libreswan-debugsource" arch="x86_64">
  <version epoch="0" ver="4.5" rel="3.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 4.5-1" date="1641988800">- Update to 4.5</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
</package>
<package pkgid="f397529bcd61d08847989ad00448c22581870521af97ba06ea8cd8e5ee94201c" name="libreswan-help" arch="x86_64">
  <version epoch="0" ver="4.11" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 4.5-1" date="1641988800">- Update to 4.5</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
</package>
<package pkgid="ae70b5a9d9c7cf0a3f035d8bc132faf34806f60e4098749f4b2cc0263a491c32" name="libreswan-help" arch="x86_64">
  <version epoch="0" ver="4.12" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 4.5-1" date="1641988800">- Update to 4.5</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.12-1" date="1691841600">- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712</changelog>
</package>
<package pkgid="49d6fa1a873e533e1a7aa4c4638c1310415f8b18dbc13f7c5517397dd0833214" name="libreswan-help" arch="x86_64">
  <version epoch="0" ver="4.14" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.12-1" date="1691841600">- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 4.12-2" date="1692014400">- Add loongarch64 support</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 4.12-3" date="1694433600">- Fix build error of 3000-Add-loongarch64-support.patch</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.14-1" date="1711454400">- Upgrade to 4.14 for fix CVE-2024-2357</changelog>
</package>
<package pkgid="68da1a63e6ad1fcbd8524f4562f7dd031f0ab390f9fcd6ebe16b0b2079f724cd" name="libreswan-help" arch="x86_64">
  <version epoch="0" ver="4.15" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
  <changelog author="yangbo &lt;yangbo1@xfusion.com&gt; - 4.11-2" date="1686744000">- Fix '\n' of the linux_variant</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.12-1" date="1691841600">- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 4.12-2" date="1692014400">- Add loongarch64 support</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 4.12-3" date="1694433600">- Fix build error of 3000-Add-loongarch64-support.patch</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.14-1" date="1711454400">- Upgrade to 4.14 for fix CVE-2024-2357</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.15-1" date="1714478400">- Update to 4.15 for fix CVE-2024-3652</changelog>
</package>
<package pkgid="65a44aefc616eb77e8ce935f8a2716ce4b69cd432c98a31cdb91ed28d3355759" name="libreswan-help" arch="x86_64">
  <version epoch="0" ver="4.5" rel="3.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 4.5-1" date="1641988800">- Update to 4.5</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
</package>
<package pkgid="30c9fc378d1f8e7c98f23e5606e47002b64df798ee2e45a260a447bf0d51ebce" name="librgw-devel" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="efd67d5d9e6727bc1e2d86e534921d11082889b6728bba8200303d9d7dac8e2e" name="librgw-devel" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="cefbad8a05594438b685fc14d5e0c1357a0aee1a583d4833967e710966e5a7e1" name="librgw2" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="f57d73cdc4a794c8e97792d5f6b0c481d0143028d44399734591a28190ce0f0a" name="librgw2" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="b4b445cda78afefe7fa95414febaef7384ba2c060089f13bcc2d7b990fc9fde2" name="librsvg2" arch="x86_64">
  <version epoch="0" ver="2.50.5" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.50.5-3" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.50.5-4" date="1673006400">- add loongarch64 support for librsvg2</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 2.50.5-5" date="1684929600">- add sw_64 support</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.50.5-6" date="1693396800">- fix CVE-2023-38633</changelog>
</package>
<package pkgid="e9a9650f94da7c4ac1ac5d288f66545eb275c26b8a6b6015c3798e68a5a34a92" name="librsvg2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.50.5" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.50.5-3" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.50.5-4" date="1673006400">- add loongarch64 support for librsvg2</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 2.50.5-5" date="1684929600">- add sw_64 support</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.50.5-6" date="1693396800">- fix CVE-2023-38633</changelog>
</package>
<package pkgid="b3dcded2ad2892418409253be86fa34d646cdaa4ab06353b67270fcded34041f" name="librsvg2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.50.5" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.50.5-3" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.50.5-4" date="1673006400">- add loongarch64 support for librsvg2</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 2.50.5-5" date="1684929600">- add sw_64 support</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.50.5-6" date="1693396800">- fix CVE-2023-38633</changelog>
</package>
<package pkgid="6985e61adfaa0f76a8ea2f2693cd66228ad385f371c1fb4d0d62bd838cb24ad2" name="librsvg2-devel" arch="x86_64">
  <version epoch="0" ver="2.50.5" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.50.5-3" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.50.5-4" date="1673006400">- add loongarch64 support for librsvg2</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 2.50.5-5" date="1684929600">- add sw_64 support</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.50.5-6" date="1693396800">- fix CVE-2023-38633</changelog>
</package>
<package pkgid="214491498453afc62bfe203def9014373e4dac30dcc6c142ea7b5f0fa4b74354" name="librsvg2-help" arch="noarch">
  <version epoch="0" ver="2.50.5" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.50.5-3" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.50.5-4" date="1673006400">- add loongarch64 support for librsvg2</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 2.50.5-5" date="1684929600">- add sw_64 support</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.50.5-6" date="1693396800">- fix CVE-2023-38633</changelog>
</package>
<package pkgid="745de9d9b1d5808a219cfb08779d4c2b776c6537c4328e8a1058113127e2c0ca" name="librsvg2-tools" arch="x86_64">
  <version epoch="0" ver="2.50.5" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.50.5-3" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.50.5-4" date="1673006400">- add loongarch64 support for librsvg2</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 2.50.5-5" date="1684929600">- add sw_64 support</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.50.5-6" date="1693396800">- fix CVE-2023-38633</changelog>
</package>
<package pkgid="e1055bf25544dd2ea5f09acf3abc83e562bd5cf50ba0b518b262eb509dd063a3" name="libsass" arch="x86_64">
  <version epoch="0" ver="3.6.4" rel="2.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 3.6.4-2" date="1703592000">- Fix CVE-2022-26592 CVE-2022-43358 CVE-2022-43357</changelog>
</package>
<package pkgid="9ce2c9dfcb5c6e95e064072e70945f8b72c092024a4b1ad2cc180e9df6f9f3f6" name="libsass-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6.4" rel="2.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 3.6.4-2" date="1703592000">- Fix CVE-2022-26592 CVE-2022-43358 CVE-2022-43357</changelog>
</package>
<package pkgid="2070e720957cdab85ada07175421d1c75dcbf7dbfc2a34454c41d0814b605816" name="libsass-debugsource" arch="x86_64">
  <version epoch="0" ver="3.6.4" rel="2.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 3.6.4-2" date="1703592000">- Fix CVE-2022-26592 CVE-2022-43358 CVE-2022-43357</changelog>
</package>
<package pkgid="3d0955434881800cd5c110e71685593bd2f75cf588853ca7267d116fbc62f84d" name="libsass-devel" arch="x86_64">
  <version epoch="0" ver="3.6.4" rel="2.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 3.6.4-2" date="1703592000">- Fix CVE-2022-26592 CVE-2022-43358 CVE-2022-43357</changelog>
</package>
<package pkgid="9658cce4ed7c34361f74a4a94206218f311af244a2cb664c08ad46cbc865647d" name="libselinux" arch="x86_64">
  <version epoch="0" ver="3.3" rel="5.oe2203sp1"/>
  <changelog author="lujie &lt;lujie42@huawei.com&gt; - 3.3-1" date="1638964800">- update libselinux-3.1 to libselinux-3.3</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 3.3-2" date="1665316800">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-3" date="1686657600">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-4" date="1694433600">- backport upstream patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.3-5" date="1701864000">- backport upstream patches</changelog>
</package>
<package pkgid="fcad0e13a4f5ce3d16e80d234f11e70ed38e570d4d20455eb5fb9bf897253511" name="libselinux-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3" rel="5.oe2203sp1"/>
  <changelog author="lujie &lt;lujie42@huawei.com&gt; - 3.3-1" date="1638964800">- update libselinux-3.1 to libselinux-3.3</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 3.3-2" date="1665316800">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-3" date="1686657600">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-4" date="1694433600">- backport upstream patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.3-5" date="1701864000">- backport upstream patches</changelog>
</package>
<package pkgid="8f9b51718e1239ce70dd977e0bb7921157279edb23df492fb0f76d6dde8c732a" name="libselinux-debugsource" arch="x86_64">
  <version epoch="0" ver="3.3" rel="5.oe2203sp1"/>
  <changelog author="lujie &lt;lujie42@huawei.com&gt; - 3.3-1" date="1638964800">- update libselinux-3.1 to libselinux-3.3</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 3.3-2" date="1665316800">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-3" date="1686657600">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-4" date="1694433600">- backport upstream patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.3-5" date="1701864000">- backport upstream patches</changelog>
</package>
<package pkgid="0d4cbfc799ccf001cc0832ed23eb69b3d9fee7df953fd548f310b210d6d25ccd" name="libselinux-devel" arch="x86_64">
  <version epoch="0" ver="3.3" rel="5.oe2203sp1"/>
  <changelog author="lujie &lt;lujie42@huawei.com&gt; - 3.3-1" date="1638964800">- update libselinux-3.1 to libselinux-3.3</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 3.3-2" date="1665316800">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-3" date="1686657600">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-4" date="1694433600">- backport upstream patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.3-5" date="1701864000">- backport upstream patches</changelog>
</package>
<package pkgid="e9e15bb5dbb9738861005680adffbdeb6873d3ba4bbf2af47d0182be6beb56cf" name="libselinux-help" arch="noarch">
  <version epoch="0" ver="3.3" rel="5.oe2203sp1"/>
  <changelog author="lujie &lt;lujie42@huawei.com&gt; - 3.3-1" date="1638964800">- update libselinux-3.1 to libselinux-3.3</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 3.3-2" date="1665316800">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-3" date="1686657600">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-4" date="1694433600">- backport upstream patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.3-5" date="1701864000">- backport upstream patches</changelog>
</package>
<package pkgid="53ac4c647947f6eb4579618b9173cc922d45ef45a0d514b18e34c01a0de6e0a7" name="libselinux-ruby" arch="x86_64">
  <version epoch="0" ver="3.3" rel="5.oe2203sp1"/>
  <changelog author="lujie &lt;lujie42@huawei.com&gt; - 3.3-1" date="1638964800">- update libselinux-3.1 to libselinux-3.3</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 3.3-2" date="1665316800">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-3" date="1686657600">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-4" date="1694433600">- backport upstream patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.3-5" date="1701864000">- backport upstream patches</changelog>
</package>
<package pkgid="1b2b99bf2b689408480706a724d5a9e6063f5e65f95d3d9f5aab9d0a85ef9ed1" name="libsgx-ae-epid" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="4d14eccb3859b717e3dff65c7d0da6c99ce18b1624bf57cd74553d986516f943" name="libsgx-ae-epid" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="079da30f7b36f2e3e7286b0a140c465fb9ca3d8f6604ffaceecee4bc20f03cb9" name="libsgx-ae-le" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="2e0ae214d367fa1e65a5aa13a345666c87cb52ee1325f950876c34af848b0804" name="libsgx-ae-le" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="34c0c3c0508369ffaa57d2e3f231d677dabbf20ab99328e411eb19fabc4632f3" name="libsgx-ae-pce" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="da30a5b35daed30677294844ed5a59550608996a7028993fe3717904325cf7e3" name="libsgx-ae-pce" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="9cc66bbbb0c4ef2287205df6f5a292b31f126b1afc5c35395f6efac964c9f05c" name="libsgx-ae-qe3" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="c54ad9d755c0d166f024d89483bb9cf67407c6ed21855f42d56d5701350fde26" name="libsgx-ae-qe3" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="efb5f9e4d5c26bab778f11e25ad374e2c69ba3b9de99fcb4c5c8d53f4723d250" name="libsgx-ae-qve" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="ca3ee98c31bc0ede71fe316781470d9278a3a0104d7fbec1324def265b77655b" name="libsgx-ae-qve" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="f22c881dc077467615748ac943897c49193483bdbb7ee709ffa3657f715518bc" name="libsgx-aesm-ecdsa-plugin" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="5c662fbd98c9653a5e88deb286cee0967075a004192256fdd35e62aff9fc2d2c" name="libsgx-aesm-ecdsa-plugin" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="6c048e43f487c7c27731455d1c4e436280d16e62038a4ab1c9a4b064c91166eb" name="libsgx-aesm-epid-plugin" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="dc4013dda96b227d67dd49fb993bf594ce9d1c3295000499ed91b8d980951bcc" name="libsgx-aesm-epid-plugin" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="685818d7ea8403211916c648b27cc1c1353711171cb2d5459a0967cb5f0f036c" name="libsgx-aesm-launch-plugin" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="1ce1e96f97a7d57a4e7e1823280c33938ac857167b173caa893c7cffae582294" name="libsgx-aesm-launch-plugin" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="84cc3c0fbf917986494790e2dfd97318e362fe16ec719072d82d9bbc8e390ec8" name="libsgx-aesm-pce-plugin" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="661eea4a4ffcb98705c962fadd84f57b165e60eee67c1477d678b3ac50f7a469" name="libsgx-aesm-pce-plugin" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="e2577bd42da6edd15cf8532692dd9ed6708df6a599205c4d9a2510f9c3abb74a" name="libsgx-aesm-quote-ex-plugin" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="4c2761d06bc414ba8df000221d9d64cd5c3ed9063dba83de2111eb9075e8a7c4" name="libsgx-aesm-quote-ex-plugin" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="c48a6f32503590ebed990734dd76a20d58c081ff043037b227ad171aba7f5999" name="libsgx-dcap-default-qpl" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="55b86fe0ccdeaf9a9149305cbd76b74509ff161d421643f034484ecf3421ee5a" name="libsgx-dcap-default-qpl" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="97d1ebc8ba0a4f971c9e164e38a4700f3e63985010bf79db35d4d3bacaf940b6" name="libsgx-dcap-default-qpl-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="fef66468df41f8c49698b8764b03e2f96ed60b5d036e544fd5cf3ef456a604d1" name="libsgx-dcap-default-qpl-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="36cb73b3a5a3c05af35bf6cdacfc217bd571e351e6abea721e2afa181b9f978b" name="libsgx-dcap-ql" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="021c6920be3843a1ddee0e8e371ab2713907194506e270943e51c43aeec5c20e" name="libsgx-dcap-ql" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="3ed4a8b6681dbcbef36d0e9209c723657ffe0b43cdb24ab7e7b4c1a7ebfce752" name="libsgx-dcap-ql-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="38ca40baed487bc83db0d3c5b907f500ce764b70a2229e96b68e57a0562c2a0a" name="libsgx-dcap-ql-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="75cac37dda806eb6996de37f5a596ba26ec709cfeb8a1fb9c7c9a0ef24b4a526" name="libsgx-dcap-quote-verify" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="58b50d51f7a4e3739244e3f190b9654cbf68a57cf4325fcaa17dc35afa25bc1a" name="libsgx-dcap-quote-verify" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="9217d95110e7d0fb61330fbf801382c426f19d38962d0c37fd45af57670f9008" name="libsgx-dcap-quote-verify-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="d683c89624b32cebebb34643a4e62e8abca6c62c269a526e42bffbd14b4eb188" name="libsgx-dcap-quote-verify-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="83ab430585fced38e489ae399c78e953b81a734346fdd41afcac9f4980892805" name="libsgx-enclave-common" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="94b99c98a1095da492610e9be594629bc887a432219578200be5d7297c83de93" name="libsgx-enclave-common" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="6ca07613317cdf25828abf7cba4e8c464806ce4181de8927a4a5e58b1434dd95" name="libsgx-enclave-common-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="e62bd063dad4c2214f36dca6e5555e2e613f387139e08fae8896d9b301c106c7" name="libsgx-enclave-common-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="a9a797422fe3b1cbd07d346cc916f15d72b5b01aef0755be801e03ad70155d62" name="libsgx-epid" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="a7891ac9b1338db6dc850e02f425c2105c658ca094d33f1d510c6d51fd4b89c1" name="libsgx-epid" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="0f624de806b2fefbe093f8b2924dc914960fa3a6f21addd3cfe7ee9650e41a7f" name="libsgx-epid-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="7482b3dec296b164c796e8b66dc7b46373c535c6e6ed6f76afd4e487266fad68" name="libsgx-epid-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="403417b96c073cb189dbaf65f1a4127736b02764feca4fb697247db3c9148767" name="libsgx-headers" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="6c3a06cc585c794da9eb19b25668cde2e433b1559a37f4571a915e49b413e8f3" name="libsgx-headers" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="5d980765a61cd215fed617ac07c4bb17f08ad33e188f4c6674660869e760f440" name="libsgx-launch" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="068e9b78ff813b06e44deddff2c265d909f00ba0b313526874570bcc4e9e6c72" name="libsgx-launch" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="611f454878109a9c51f2728d7e50d2170a3712ab0eadde057a3f346305953e0b" name="libsgx-launch-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="da07b41954a061758f024d2e63a5ed88966afa37b70667874988aa6ca9477f23" name="libsgx-launch-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="9bdd3d4c25876decc9e9c70c0f7f69d48cabe154221f96e70a45593c8b54093c" name="libsgx-pce-logic" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="86a592492b22c4af79f13248100926168207c8d26845c3d508cc1c4aef08e96d" name="libsgx-pce-logic" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="1f85afc05d7358a6d35bb2240b42f04298ee85da9969aa005666a11b960ff805" name="libsgx-qe3-logic" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="b29358c63843595056c99954aa67049e8a8260baf5e65111d19b9bb0ffb8d921" name="libsgx-qe3-logic" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="2fbfd156c7c1464b11c63cd8ee24fe46912fd573a95f5b92c689e2a257409d78" name="libsgx-quote-ex" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="dd5222aea62acd055cfee20944d50bf88ccf3c4c27cf5200972b457f23b56a9c" name="libsgx-quote-ex" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="1a8da4603dfd2357b31551150c6db6cf1cae1d78655295fb167e337a2061582d" name="libsgx-quote-ex-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="b4bc4503a7a1aad2a331ed5414143af8096b40385f931b0b5446642c56c6e752" name="libsgx-quote-ex-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="e871f67be859db1b07529e2820f3ca076a013ee8fa552255a602439b77a1cc25" name="libsgx-ra-network" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="59be0b5af2f47c7b46ebb6baf4d5c9c627aa3c7a87dac44b299ed12d21af7bb9" name="libsgx-ra-network" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="e6fd8c07786bcf70067beb323aa7cbeacf903d9b322321bc65237d3575335429" name="libsgx-ra-network-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="51d160e2a0da4d6950eaae9f44bba27698388194d1914b390ecf5e8ad10a42f5" name="libsgx-ra-network-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="4e8810189bb63a68e64b48bf55fdd5f8b3b3aab502b931c2e2fd4286bcafd338" name="libsgx-ra-uefi" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="f38150ed9b7f86bcab42b50115ccd5f67bbe7199764ddfc120949581d96de0c6" name="libsgx-ra-uefi" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="2fce4254b88d8d4e192566db524d28e08feb1cc9b571c3416d23c925bea0e442" name="libsgx-ra-uefi-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="e997e4ad17a1636b93354d57360fe373423a53803a4681dd0809ffc8ee31c0f8" name="libsgx-ra-uefi-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="8c3fb3d048764fcf370ae9ad7c6b4d58e83c5a168738549fd3557ade7316dd5c" name="libsgx-uae-service" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="b46afebfae7ab4d107a987c2fe3ddf81c047340f34d1b4eab92562e9d34b6c3f" name="libsgx-uae-service" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="fd51c6b9e929bba9ff2c34158ac78a37b6171a4ccff73aabf0980a7c133aed82" name="libsgx-urts" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="0277444e21d8ba9fa67d2070e9d1341225b04b2f25b05b9cf5232424037c921d" name="libsgx-urts" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="aa2932448b7f0cd4cd7a4a9c5e5f98de9a00726b97c6cee517de3c898d54ccc2" name="libsmartcols" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="28.oe2203sp1"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-19" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
       backport-write-correctly-handle-wide-characters.patch
       backport-wall-convert-homebrew-buffering-to-open_memstream.patch
       backport-wall-use-fputs_careful.patch
       backport-hexdump-parse-handle-truncated-format-pattern.patch
       backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
       backport-lscpu-fix-p-output-all-caches-delimiter.patch
       backport-add-return-in-supam_conv-function.patch
       backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
       backport-sulogin-ignore-none-existing-console-devices.patch
       backport-sulogin-fix-KDGKBMODE-ifdef.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-20" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
       backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-21" date="1691064000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libblkid-jfs-avoid-undefined-shift.patch
       backport-cfdisk-add-hint-about-labels-for-bootable-flag.patch
       backport-logger-initialize-socket-credentials-contol-union.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-22" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-column-fix-buffer-overflow-when-l-specified.patch
       backport-column-fix-greedy-mode-on-l.patch
       backport-column-fix-memory-leak.patch
       backport-column-fix-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-23" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-scriptreplay-support-ctrl-s-and-ctrl-g.patch
       backport-login-use-correct-terminal-fd-during-setup.patch
       backport-login-prevent-undefined-ioctl-and-tcsetattr-calls.patch
       backport-libblkid-avoid-memory-leak-of-cachefile-path.patch
       backport-more-avoid-out-of-bound-access.patch
       backport-lslogins-fix-realloc-loop-allocation-size.patch
       backport-ldattach-don-t-call-exit-from-signal-handler.patch
       backport-libblkid-ntfs-validate-that-sector_size-is-a-power-o.patch
       backport-blkid-fix-call-to-err_exclusive_options.patch
       backport-libblkid-reset-errno-before-calling-probefuncs.patch
       backport-lib-path-fix-possible-out-of-boundary-access.patch
       backport-libmount-improve-mnt_table_next_child_fs.patch
       backport-libmount-fix-possible-NULL-dereference-coverity-scan.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-24" date="1705406400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
	backport-libsmartcols-flush-correct-stream.patch
	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
	backport-cal-avoid-out-of-bound-write.patch
	backport-libfdisk-sun-properly-initialize-partition-data.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-25" date="1708344000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:solve the issue of ext4 is incorrectly probed as drbd
        [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
        backport-libblkid-probe-read-data-in-chunks.patch
        backport-libblkid-avoid-aligning-out-of-probing-area.patch
        backport-libblkid-drbd-validate-zero-padding.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-26" date="1709899200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
       backport-libblkid-hfsplus-reduce-false-positive.patch
       backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
       backport-libblkid-drbd-reduce-false-positive.patch
       backport-lib-cpuset-exit-early-from-cpulist_parse.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-27" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
       backport-libblkid-Check-offset-in-LUKS2-header.patch
       backport-more-fix-poll-use.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-28085
- SUG:NA
- DESC:fix CVE-2024-28085</changelog>
</package>
<package pkgid="6eb92972d9ea2857c756e67040e9d5d7c44c21010b3fd1d763648f651b860be0" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.17.2" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-8" date="1660305600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ldb require version</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-9" date="1661515200">- Type:cves
- ID:CVE-2022-32743
- SUG:NA
- DESC:fix CVE-2022-32743</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-10" date="1661947200">- Type:cves
- ID:CVE-2022-1615
- SUG:NA
- DESC:fix CVE-2022-1615</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
</package>
<package pkgid="ccad2a1514a2e4085f5f9318c0d0c0a6e3ba29025216c34149e216a63f734574" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="10.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
</package>
<package pkgid="8f5945ca8618f7d639d65a1187579b1df539487e2c4c055dc8e00714cc8c43b1" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="11.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-11" date="1705665600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:speeds up the creation of source rpm</changelog>
</package>
<package pkgid="1e57778a6e1a53765a0b31518686dbedac366ed7cc09071e56856416e8975854" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="2.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
</package>
<package pkgid="345882828a1ba75671e439becdd59adabb2e5c34a82dfe85f657d2c07efc67f8" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
</package>
<package pkgid="456508d7ac4a39a424494cac5682066cd7c59825e50dd6d621920dd680dc4978" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="6.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
</package>
<package pkgid="5d04032aae21a320009d1b710a2966f95fe9417db4f84f50d747e98e064b0bcc" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="8.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
</package>
<package pkgid="464dbf72ffa8898b1d4731b16c6ab6251019850a0ac27cd8f900e4869b2ffb50" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.17.2" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-8" date="1660305600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ldb require version</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-9" date="1661515200">- Type:cves
- ID:CVE-2022-32743
- SUG:NA
- DESC:fix CVE-2022-32743</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-10" date="1661947200">- Type:cves
- ID:CVE-2022-1615
- SUG:NA
- DESC:fix CVE-2022-1615</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
</package>
<package pkgid="49c88e64b4b078ec7f8c7396b2d45f68c43525c99cd63e9f0d3cde4036e9fd2c" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="10.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
</package>
<package pkgid="8d60fa293ba55f71191167f47b9a235ef04604da4facfc24084f0d03b31dd23c" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="11.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-11" date="1705665600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:speeds up the creation of source rpm</changelog>
</package>
<package pkgid="28a2a72a14fb66c123a91e6e02bdf5506d43e260f381ec013efc93842722a312" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="2.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
</package>
<package pkgid="42e565d207b672912a25d2fd557a71aa08a94b282a69224815ae9748f805eafb" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
</package>
<package pkgid="d0f3842878eefd41ce1e965856b4a8d2e294e3d15247567a53b9ca1db36c8e97" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="6.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
</package>
<package pkgid="166449df60f6417e97941e4a6becc06d09e0092299bb9e8b68386493889188f9" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="8.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
</package>
<package pkgid="31a8c8b6d82c1994cccb02231e07350c318365095254e555276bd70e5d98c9e8" name="libsolv" arch="x86_64">
  <version epoch="0" ver="0.7.22" rel="2.oe2203sp1"/>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 0.7.20-1" date="1640433600">- update to 0.7.20</changelog>
  <changelog author="zhangjun&lt;zhangjun@kylinos.cn&gt; - 0.7.20-2" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leak when using testsolv to execute cases 
       Fix segfault on conflict resolution when using bindings</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.20-3" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ensure-duplinvolvedmap_all-is-reset.patch</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-1" date="1667908800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update libsolv to 0.7.22-1</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-2" date="1692446400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix requirement error</changelog>
</package>
<package pkgid="ab03efb1e3ab90dff9fe12acf0193290236d9b1ccfc6162d6bf9b7d96e4734a8" name="libsolv-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.22" rel="2.oe2203sp1"/>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 0.7.20-1" date="1640433600">- update to 0.7.20</changelog>
  <changelog author="zhangjun&lt;zhangjun@kylinos.cn&gt; - 0.7.20-2" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leak when using testsolv to execute cases 
       Fix segfault on conflict resolution when using bindings</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.20-3" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ensure-duplinvolvedmap_all-is-reset.patch</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-1" date="1667908800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update libsolv to 0.7.22-1</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-2" date="1692446400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix requirement error</changelog>
</package>
<package pkgid="e4bb9fc82632762cff40caefcf2c62c822124b83a4c9c0e1de90addf151a29d3" name="libsolv-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7.22" rel="2.oe2203sp1"/>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 0.7.20-1" date="1640433600">- update to 0.7.20</changelog>
  <changelog author="zhangjun&lt;zhangjun@kylinos.cn&gt; - 0.7.20-2" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leak when using testsolv to execute cases 
       Fix segfault on conflict resolution when using bindings</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.20-3" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ensure-duplinvolvedmap_all-is-reset.patch</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-1" date="1667908800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update libsolv to 0.7.22-1</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-2" date="1692446400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix requirement error</changelog>
</package>
<package pkgid="0f1b5a7eb8af0734110f7faa1d080f5c41a48fe8cfdbf4c9b6310ce768f58278" name="libsolv-demo" arch="x86_64">
  <version epoch="0" ver="0.7.22" rel="2.oe2203sp1"/>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 0.7.20-1" date="1640433600">- update to 0.7.20</changelog>
  <changelog author="zhangjun&lt;zhangjun@kylinos.cn&gt; - 0.7.20-2" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leak when using testsolv to execute cases 
       Fix segfault on conflict resolution when using bindings</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.20-3" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ensure-duplinvolvedmap_all-is-reset.patch</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-1" date="1667908800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update libsolv to 0.7.22-1</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-2" date="1692446400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix requirement error</changelog>
</package>
<package pkgid="c0fc3869a3653e411c1bf8f799f3162ba0afd3712313e02adc18a7299d9500c6" name="libsolv-devel" arch="x86_64">
  <version epoch="0" ver="0.7.22" rel="2.oe2203sp1"/>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 0.7.20-1" date="1640433600">- update to 0.7.20</changelog>
  <changelog author="zhangjun&lt;zhangjun@kylinos.cn&gt; - 0.7.20-2" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leak when using testsolv to execute cases 
       Fix segfault on conflict resolution when using bindings</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.20-3" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ensure-duplinvolvedmap_all-is-reset.patch</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-1" date="1667908800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update libsolv to 0.7.22-1</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-2" date="1692446400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix requirement error</changelog>
</package>
<package pkgid="d2ef4b56fc4f3cbb4b8d6b7468e332ad197377d3c18909a37c7d7186fb50dca9" name="libsolv-help" arch="noarch">
  <version epoch="0" ver="0.7.22" rel="2.oe2203sp1"/>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 0.7.20-1" date="1640433600">- update to 0.7.20</changelog>
  <changelog author="zhangjun&lt;zhangjun@kylinos.cn&gt; - 0.7.20-2" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leak when using testsolv to execute cases 
       Fix segfault on conflict resolution when using bindings</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.20-3" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ensure-duplinvolvedmap_all-is-reset.patch</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-1" date="1667908800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update libsolv to 0.7.22-1</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-2" date="1692446400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix requirement error</changelog>
</package>
<package pkgid="1bae417550950e22982a07a3f5a7633ab9bb06d26c7a9b2c5b50166731feae4a" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.22" rel="2.oe2203sp1"/>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 0.7.20-1" date="1640433600">- update to 0.7.20</changelog>
  <changelog author="zhangjun&lt;zhangjun@kylinos.cn&gt; - 0.7.20-2" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leak when using testsolv to execute cases 
       Fix segfault on conflict resolution when using bindings</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.20-3" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ensure-duplinvolvedmap_all-is-reset.patch</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-1" date="1667908800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update libsolv to 0.7.22-1</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-2" date="1692446400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix requirement error</changelog>
</package>
<package pkgid="5612c46cb7feef228aa6116e8701104f5da962c9db2e3cc28b042172a0f9901e" name="libsoup" arch="x86_64">
  <version epoch="0" ver="2.74.2" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.74.2-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="2fa88f0d9fac5f1d03b4eec91de15cfc2db7d41b8fee52a02d245f6979705028" name="libsoup" arch="x86_64">
  <version epoch="0" ver="2.74.2" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.74.2-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-4" date="1713441600">- Rebuild for next release</changelog>
</package>
<package pkgid="d3cd1d685bb151c42a1ab41fbfeaad317eb5edd0d76b1c816b56371cc55a1c10" name="libsoup-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.74.2" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.74.2-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="d451eabe1297cc4554df37e3259f0547d11f3b57af6b101f35fe45b5286befb2" name="libsoup-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.74.2" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.74.2-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-4" date="1713441600">- Rebuild for next release</changelog>
</package>
<package pkgid="58cc1c813699ca823f9315b10c13ecd06f9a7727e7b4d5a54e106b6734949bc5" name="libsoup-debugsource" arch="x86_64">
  <version epoch="0" ver="2.74.2" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.74.2-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="b0262255bd41c001735c3c14a4831545d65cf443c03a292c005dc4262906b465" name="libsoup-debugsource" arch="x86_64">
  <version epoch="0" ver="2.74.2" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.74.2-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-4" date="1713441600">- Rebuild for next release</changelog>
</package>
<package pkgid="f58c8fb57c0cc925da3ba9761dff7d96d9d4e13c25cf5501730866a52fed41a0" name="libsoup-devel" arch="x86_64">
  <version epoch="0" ver="2.74.2" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.74.2-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="be9eadf587a766dcb9024120feeab7022d68f48599c0b592aa79a5d05cb6e279" name="libsoup-devel" arch="x86_64">
  <version epoch="0" ver="2.74.2" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.74.2-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-4" date="1713441600">- Rebuild for next release</changelog>
</package>
<package pkgid="e081c988740b4fa78a116dd3c53b2c8019234786b2b3fdd30c5fa2d0b7b6d86e" name="libsoup-help" arch="noarch">
  <version epoch="0" ver="2.74.2" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.74.2-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="5c82f5dcee0796d96b74eb1afeaff8cb17d2c1586f5e9ea01efec5bbfd901112" name="libsoup-help" arch="noarch">
  <version epoch="0" ver="2.74.2" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.74.2-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-4" date="1713441600">- Rebuild for next release</changelog>
</package>
<package pkgid="0760458475e8a875a19152f1261289697960c47815a91a7edc3ae43bd2c3f577" name="libssh" arch="x86_64">
  <version epoch="0" ver="0.9.6" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.9.6-1" date="1638532800">- Type:requirement
- Id:NA
- SUG:NA
- DESC:update libssh to 0.9.6</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 0.9.6-2" date="1647432000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove obsolete lib</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 0.9.6-3" date="1662120000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add errno while reset with strtoul call
       fix error returned in ssh_userauth_try_publicke
       client do not close the socket if it was set via opt
       fix openForward to not set sourcehost to NULL
       fix the length calculation of packet in sftp_write</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 0.9.6-4" date="1665662400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:options: Parse hostname by last '@'
       torture_options: Add test for '@' in login name
       session: Initialize pointers
       tests: Ensure the mode of the created file is what we set</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.9.6-5" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches:
       Avoid false positive report from Coveritt CID 1470006
       kdf: Avoid endianess issues
       misc: Fix format truncation in ssh_path_expand_escape()
       misc: Fix expanding port numbers
       misc: rename gettimeofday symbol
       session: Initialize the port with the standard port (22)
       session-&gt;socket_callbacks.data will be set to ssh_packet_socket_callback
       socket: Add error message if execv fails
       tests: Add test for expanding port numbers</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-6" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:config: Escape brackets in ProxyCommand build
       packet: do not enqueue outgoing packets</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-7" date="1684497600">- Type:CVE
- Id:CVE-2023-1667,CVE-2023-2283
- SUG:NA
- DESC:fix CVE-2023-1667 and CVE-2023-2283</changelog>
</package>
<package pkgid="ec418628e3e7b8fc2195ad929b38bdf8fe98d9f3e7971d7c46cb1d32bd02cfcb" name="libssh" arch="x86_64">
  <version epoch="0" ver="0.9.6" rel="8.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 0.9.6-2" date="1647432000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove obsolete lib</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 0.9.6-3" date="1662120000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add errno while reset with strtoul call
       fix error returned in ssh_userauth_try_publicke
       client do not close the socket if it was set via opt
       fix openForward to not set sourcehost to NULL
       fix the length calculation of packet in sftp_write</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 0.9.6-4" date="1665662400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:options: Parse hostname by last '@'
       torture_options: Add test for '@' in login name
       session: Initialize pointers
       tests: Ensure the mode of the created file is what we set</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.9.6-5" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches:
       Avoid false positive report from Coveritt CID 1470006
       kdf: Avoid endianess issues
       misc: Fix format truncation in ssh_path_expand_escape()
       misc: Fix expanding port numbers
       misc: rename gettimeofday symbol
       session: Initialize the port with the standard port (22)
       session-&gt;socket_callbacks.data will be set to ssh_packet_socket_callback
       socket: Add error message if execv fails
       tests: Add test for expanding port numbers</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-6" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:config: Escape brackets in ProxyCommand build
       packet: do not enqueue outgoing packets</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-7" date="1684497600">- Type:CVE
- Id:CVE-2023-1667,CVE-2023-2283
- SUG:NA
- DESC:fix CVE-2023-1667 and CVE-2023-2283</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-8" date="1703764800">- Type:CVE
- Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795</changelog>
</package>
<package pkgid="401ec30948bd6b9936dc6c078e403568ffcc1e41843a8734e44f665e1b72f678" name="libssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.6" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.9.6-1" date="1638532800">- Type:requirement
- Id:NA
- SUG:NA
- DESC:update libssh to 0.9.6</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 0.9.6-2" date="1647432000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove obsolete lib</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 0.9.6-3" date="1662120000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add errno while reset with strtoul call
       fix error returned in ssh_userauth_try_publicke
       client do not close the socket if it was set via opt
       fix openForward to not set sourcehost to NULL
       fix the length calculation of packet in sftp_write</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 0.9.6-4" date="1665662400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:options: Parse hostname by last '@'
       torture_options: Add test for '@' in login name
       session: Initialize pointers
       tests: Ensure the mode of the created file is what we set</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.9.6-5" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches:
       Avoid false positive report from Coveritt CID 1470006
       kdf: Avoid endianess issues
       misc: Fix format truncation in ssh_path_expand_escape()
       misc: Fix expanding port numbers
       misc: rename gettimeofday symbol
       session: Initialize the port with the standard port (22)
       session-&gt;socket_callbacks.data will be set to ssh_packet_socket_callback
       socket: Add error message if execv fails
       tests: Add test for expanding port numbers</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-6" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:config: Escape brackets in ProxyCommand build
       packet: do not enqueue outgoing packets</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-7" date="1684497600">- Type:CVE
- Id:CVE-2023-1667,CVE-2023-2283
- SUG:NA
- DESC:fix CVE-2023-1667 and CVE-2023-2283</changelog>
</package>
<package pkgid="18844a63b3ff142602919bb914c53bd8a66b870a64930e1515d8b04e17722f4d" name="libssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.6" rel="8.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 0.9.6-2" date="1647432000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove obsolete lib</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 0.9.6-3" date="1662120000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add errno while reset with strtoul call
       fix error returned in ssh_userauth_try_publicke
       client do not close the socket if it was set via opt
       fix openForward to not set sourcehost to NULL
       fix the length calculation of packet in sftp_write</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 0.9.6-4" date="1665662400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:options: Parse hostname by last '@'
       torture_options: Add test for '@' in login name
       session: Initialize pointers
       tests: Ensure the mode of the created file is what we set</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.9.6-5" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches:
       Avoid false positive report from Coveritt CID 1470006
       kdf: Avoid endianess issues
       misc: Fix format truncation in ssh_path_expand_escape()
       misc: Fix expanding port numbers
       misc: rename gettimeofday symbol
       session: Initialize the port with the standard port (22)
       session-&gt;socket_callbacks.data will be set to ssh_packet_socket_callback
       socket: Add error message if execv fails
       tests: Add test for expanding port numbers</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-6" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:config: Escape brackets in ProxyCommand build
       packet: do not enqueue outgoing packets</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-7" date="1684497600">- Type:CVE
- Id:CVE-2023-1667,CVE-2023-2283
- SUG:NA
- DESC:fix CVE-2023-1667 and CVE-2023-2283</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-8" date="1703764800">- Type:CVE
- Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795</changelog>
</package>
<package pkgid="f0c0f151e8b018f623593bcd1103f9d64e121105e0c001749071e4363b70b6ce" name="libssh-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.6" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.9.6-1" date="1638532800">- Type:requirement
- Id:NA
- SUG:NA
- DESC:update libssh to 0.9.6</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 0.9.6-2" date="1647432000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove obsolete lib</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 0.9.6-3" date="1662120000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add errno while reset with strtoul call
       fix error returned in ssh_userauth_try_publicke
       client do not close the socket if it was set via opt
       fix openForward to not set sourcehost to NULL
       fix the length calculation of packet in sftp_write</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 0.9.6-4" date="1665662400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:options: Parse hostname by last '@'
       torture_options: Add test for '@' in login name
       session: Initialize pointers
       tests: Ensure the mode of the created file is what we set</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.9.6-5" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches:
       Avoid false positive report from Coveritt CID 1470006
       kdf: Avoid endianess issues
       misc: Fix format truncation in ssh_path_expand_escape()
       misc: Fix expanding port numbers
       misc: rename gettimeofday symbol
       session: Initialize the port with the standard port (22)
       session-&gt;socket_callbacks.data will be set to ssh_packet_socket_callback
       socket: Add error message if execv fails
       tests: Add test for expanding port numbers</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-6" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:config: Escape brackets in ProxyCommand build
       packet: do not enqueue outgoing packets</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-7" date="1684497600">- Type:CVE
- Id:CVE-2023-1667,CVE-2023-2283
- SUG:NA
- DESC:fix CVE-2023-1667 and CVE-2023-2283</changelog>
</package>
<package pkgid="fea1769ee3b23fc0e62fc4bc2a54c45f779ad53b4a5df0d404a8106b372c0a81" name="libssh-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.6" rel="8.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 0.9.6-2" date="1647432000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove obsolete lib</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 0.9.6-3" date="1662120000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add errno while reset with strtoul call
       fix error returned in ssh_userauth_try_publicke
       client do not close the socket if it was set via opt
       fix openForward to not set sourcehost to NULL
       fix the length calculation of packet in sftp_write</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 0.9.6-4" date="1665662400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:options: Parse hostname by last '@'
       torture_options: Add test for '@' in login name
       session: Initialize pointers
       tests: Ensure the mode of the created file is what we set</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.9.6-5" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches:
       Avoid false positive report from Coveritt CID 1470006
       kdf: Avoid endianess issues
       misc: Fix format truncation in ssh_path_expand_escape()
       misc: Fix expanding port numbers
       misc: rename gettimeofday symbol
       session: Initialize the port with the standard port (22)
       session-&gt;socket_callbacks.data will be set to ssh_packet_socket_callback
       socket: Add error message if execv fails
       tests: Add test for expanding port numbers</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-6" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:config: Escape brackets in ProxyCommand build
       packet: do not enqueue outgoing packets</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-7" date="1684497600">- Type:CVE
- Id:CVE-2023-1667,CVE-2023-2283
- SUG:NA
- DESC:fix CVE-2023-1667 and CVE-2023-2283</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-8" date="1703764800">- Type:CVE
- Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795</changelog>
</package>
<package pkgid="17e59412cff944ab70756a144d6ec70697207856e75986a1a6b175f614452c51" name="libssh-devel" arch="x86_64">
  <version epoch="0" ver="0.9.6" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.9.6-1" date="1638532800">- Type:requirement
- Id:NA
- SUG:NA
- DESC:update libssh to 0.9.6</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 0.9.6-2" date="1647432000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove obsolete lib</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 0.9.6-3" date="1662120000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add errno while reset with strtoul call
       fix error returned in ssh_userauth_try_publicke
       client do not close the socket if it was set via opt
       fix openForward to not set sourcehost to NULL
       fix the length calculation of packet in sftp_write</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 0.9.6-4" date="1665662400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:options: Parse hostname by last '@'
       torture_options: Add test for '@' in login name
       session: Initialize pointers
       tests: Ensure the mode of the created file is what we set</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.9.6-5" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches:
       Avoid false positive report from Coveritt CID 1470006
       kdf: Avoid endianess issues
       misc: Fix format truncation in ssh_path_expand_escape()
       misc: Fix expanding port numbers
       misc: rename gettimeofday symbol
       session: Initialize the port with the standard port (22)
       session-&gt;socket_callbacks.data will be set to ssh_packet_socket_callback
       socket: Add error message if execv fails
       tests: Add test for expanding port numbers</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-6" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:config: Escape brackets in ProxyCommand build
       packet: do not enqueue outgoing packets</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-7" date="1684497600">- Type:CVE
- Id:CVE-2023-1667,CVE-2023-2283
- SUG:NA
- DESC:fix CVE-2023-1667 and CVE-2023-2283</changelog>
</package>
<package pkgid="097b94704f89a643245b3ea8d4089011a24aa91f0844dd3bf0d4def23a0d970b" name="libssh-devel" arch="x86_64">
  <version epoch="0" ver="0.9.6" rel="8.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 0.9.6-2" date="1647432000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove obsolete lib</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 0.9.6-3" date="1662120000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add errno while reset with strtoul call
       fix error returned in ssh_userauth_try_publicke
       client do not close the socket if it was set via opt
       fix openForward to not set sourcehost to NULL
       fix the length calculation of packet in sftp_write</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 0.9.6-4" date="1665662400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:options: Parse hostname by last '@'
       torture_options: Add test for '@' in login name
       session: Initialize pointers
       tests: Ensure the mode of the created file is what we set</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.9.6-5" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches:
       Avoid false positive report from Coveritt CID 1470006
       kdf: Avoid endianess issues
       misc: Fix format truncation in ssh_path_expand_escape()
       misc: Fix expanding port numbers
       misc: rename gettimeofday symbol
       session: Initialize the port with the standard port (22)
       session-&gt;socket_callbacks.data will be set to ssh_packet_socket_callback
       socket: Add error message if execv fails
       tests: Add test for expanding port numbers</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-6" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:config: Escape brackets in ProxyCommand build
       packet: do not enqueue outgoing packets</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-7" date="1684497600">- Type:CVE
- Id:CVE-2023-1667,CVE-2023-2283
- SUG:NA
- DESC:fix CVE-2023-1667 and CVE-2023-2283</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-8" date="1703764800">- Type:CVE
- Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795</changelog>
</package>
<package pkgid="964b261a9301be9a4211a14e0e8d6856a284fc5f24085bb13e46f0a9e9ee9ebf" name="libssh-help" arch="noarch">
  <version epoch="0" ver="0.9.6" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.9.6-1" date="1638532800">- Type:requirement
- Id:NA
- SUG:NA
- DESC:update libssh to 0.9.6</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 0.9.6-2" date="1647432000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove obsolete lib</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 0.9.6-3" date="1662120000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add errno while reset with strtoul call
       fix error returned in ssh_userauth_try_publicke
       client do not close the socket if it was set via opt
       fix openForward to not set sourcehost to NULL
       fix the length calculation of packet in sftp_write</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 0.9.6-4" date="1665662400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:options: Parse hostname by last '@'
       torture_options: Add test for '@' in login name
       session: Initialize pointers
       tests: Ensure the mode of the created file is what we set</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.9.6-5" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches:
       Avoid false positive report from Coveritt CID 1470006
       kdf: Avoid endianess issues
       misc: Fix format truncation in ssh_path_expand_escape()
       misc: Fix expanding port numbers
       misc: rename gettimeofday symbol
       session: Initialize the port with the standard port (22)
       session-&gt;socket_callbacks.data will be set to ssh_packet_socket_callback
       socket: Add error message if execv fails
       tests: Add test for expanding port numbers</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-6" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:config: Escape brackets in ProxyCommand build
       packet: do not enqueue outgoing packets</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-7" date="1684497600">- Type:CVE
- Id:CVE-2023-1667,CVE-2023-2283
- SUG:NA
- DESC:fix CVE-2023-1667 and CVE-2023-2283</changelog>
</package>
<package pkgid="3fa8beaa9c58f5339d1fbd8e85442c318ae34257a05730ef35a4ebb033ef6074" name="libssh-help" arch="noarch">
  <version epoch="0" ver="0.9.6" rel="8.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 0.9.6-2" date="1647432000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove obsolete lib</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 0.9.6-3" date="1662120000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add errno while reset with strtoul call
       fix error returned in ssh_userauth_try_publicke
       client do not close the socket if it was set via opt
       fix openForward to not set sourcehost to NULL
       fix the length calculation of packet in sftp_write</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 0.9.6-4" date="1665662400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:options: Parse hostname by last '@'
       torture_options: Add test for '@' in login name
       session: Initialize pointers
       tests: Ensure the mode of the created file is what we set</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.9.6-5" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches:
       Avoid false positive report from Coveritt CID 1470006
       kdf: Avoid endianess issues
       misc: Fix format truncation in ssh_path_expand_escape()
       misc: Fix expanding port numbers
       misc: rename gettimeofday symbol
       session: Initialize the port with the standard port (22)
       session-&gt;socket_callbacks.data will be set to ssh_packet_socket_callback
       socket: Add error message if execv fails
       tests: Add test for expanding port numbers</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-6" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:config: Escape brackets in ProxyCommand build
       packet: do not enqueue outgoing packets</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-7" date="1684497600">- Type:CVE
- Id:CVE-2023-1667,CVE-2023-2283
- SUG:NA
- DESC:fix CVE-2023-1667 and CVE-2023-2283</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-8" date="1703764800">- Type:CVE
- Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795</changelog>
</package>
<package pkgid="12fe893865e665dcdb25daa0abdad9336b2d9859f7f3a649d10616778bc6ca96" name="libssh2" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="6.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-3" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sftp: Prevent files from being skipped</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-4" date="1676548800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Support rsa-sha2 agent flags</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-5" date="1680004800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-6" date="1712145600">- Type:CVE
- ID:CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-48795</changelog>
</package>
<package pkgid="f418d3c1852cf74899cf6d5a8da0609bd0db15aa2b0981c12059f6bc71ded137" name="libssh2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="6.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-3" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sftp: Prevent files from being skipped</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-4" date="1676548800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Support rsa-sha2 agent flags</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-5" date="1680004800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-6" date="1712145600">- Type:CVE
- ID:CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-48795</changelog>
</package>
<package pkgid="2a71a45c8c8a9908fe23438627a4d4b219a4ceb4916c77b4813d70339ed6ecc5" name="libssh2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="6.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-3" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sftp: Prevent files from being skipped</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-4" date="1676548800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Support rsa-sha2 agent flags</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-5" date="1680004800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-6" date="1712145600">- Type:CVE
- ID:CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-48795</changelog>
</package>
<package pkgid="b9b6de6a4ef7699c8ccfbbda9c5fec8508a32c79c379cd1d51a19b8a9f55dba2" name="libssh2-devel" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="6.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-3" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sftp: Prevent files from being skipped</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-4" date="1676548800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Support rsa-sha2 agent flags</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-5" date="1680004800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-6" date="1712145600">- Type:CVE
- ID:CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-48795</changelog>
</package>
<package pkgid="9048d65b93dbc14c9876dbde5536157736ebb9262b10dac044e9153c7de553ec" name="libssh2-help" arch="noarch">
  <version epoch="0" ver="1.10.0" rel="6.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-3" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sftp: Prevent files from being skipped</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-4" date="1676548800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Support rsa-sha2 agent flags</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-5" date="1680004800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-6" date="1712145600">- Type:CVE
- ID:CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-48795</changelog>
</package>
<package pkgid="6ffe445dc786877ac790822148241b3976ad04500806d8c5b6cdac1cfd140565" name="libstdc++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="ce2fd45a3bc4827a68b41f048f240e02bc58a2113d83cffb4327b7848a1677d0" name="libstdc++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="70abf0598762fc4336db657012c5f85c8763f422d0671f0b25b394c380a9b471" name="libstdc++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="2f8066f6464e73317ac5af921257aa7f591f4e37143d0495ed91c8025dd73f03" name="libstdc++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="0e381479803c390c5d1cfbd2cfe1714f0178c000dc6d1feea39d4c5cb848ec49" name="libstdc++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="8edb2bb2b01e843b134cbbd64519a21579219bd2c0e01ace441b08a812ce8f8d" name="libstdc++" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="91568faf1e965efd1049ea8d66d471af423ed9d01cffb10afa77d83306f4e081" name="libstdc++-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="00e09149bc1b1952b029635f36403f78c9b4ec1b82fca360c3914f3c73d5ac1e" name="libstdc++-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="a183e554a7abdd00d2f2c98ce7f0f41817383f9a670fc59cbbdf0327040ea647" name="libstdc++-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="c75d18ac6b579cb2e7e0889c7f45a2372261379ee8960832796a37614d8892d6" name="libstdc++-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="c067b30c1e9ca386914a785106fbaf09afcbbe99ef3afb90720a6eea9dc0c58e" name="libstdc++-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="df710a1d9f32b0e929a10c5b418fe499e33aa7000f1406e746bbffea4aec5e2b" name="libstdc++-devel" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="b08c44da2245676410fd4074b20aa595d42e91a8a5bc4fe41c41d73b69c9c7fc" name="libstdc++-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="734b343986319d68bc8cb7b5112ca595fe208607a421d1897d81db9e155175fd" name="libstdc++-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="e7192620455f76b6103d278fcf1b4dd58f1361c934ec180f3aa13530e6d38adf" name="libstdc++-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="7a467782fe0ea3956fe3458e618d130fd7047c7c7c33d971f8dca59eb68c8f16" name="libstdc++-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="a2a6fbd0825c3a0c804a9b87cd21ce6d47a280ca170084aaeba4de6648425103" name="libstdc++-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="1d4ade928021dcceb1f29827aec6e282cd3958cbff1577926afbf10eaa7b5896" name="libstdc++-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="b351c97bee78d2386a816a877ea5b2e013372d4c5773e7a4ed8a6afffa45e157" name="libsysprof-ui" arch="x86_64">
  <version epoch="0" ver="3.38.1" rel="3.oe2203sp1"/>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 3.38.1-2" date="1626782400">- delete rely on low version of the file</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 3.38.1-3" date="1674993600">- Fix glib2-static install dependency</changelog>
</package>
<package pkgid="7d4bbf8124a5606baf6aab05514332a5c5dbcb5e864780cba89de163d8dcf562" name="libsysprof-ui" arch="x86_64">
  <version epoch="0" ver="3.38.1" rel="4.oe2203sp1"/>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 3.38.1-3" date="1674993600">- Fix glib2-static install dependency</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 3.38.1-4" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="a898ef00393267f46f1e22ea2aa7ea88c165a6e1ade6009e084b1029e85805bf" name="libteam" arch="x86_64">
  <version epoch="0" ver="1.31" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.31-2" date="1662638400">- fix error options in doc</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.31-3" date="1695297600">- fix an issue about teamd is using 100% cpu usage (of 1 core)</changelog>
</package>
<package pkgid="b3b63be66b9d6516d26eb23723f7f1c2c61211f2a69398597cec15597d05b86f" name="libteam-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.31" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.31-2" date="1662638400">- fix error options in doc</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.31-3" date="1695297600">- fix an issue about teamd is using 100% cpu usage (of 1 core)</changelog>
</package>
<package pkgid="406d4a0d6ae21125b25ed2f75e3cc4262d45e16aec661ef59859027afe66caa7" name="libteam-debugsource" arch="x86_64">
  <version epoch="0" ver="1.31" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.31-2" date="1662638400">- fix error options in doc</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.31-3" date="1695297600">- fix an issue about teamd is using 100% cpu usage (of 1 core)</changelog>
</package>
<package pkgid="a98640fff8aec089e932ae86f8cd9221c5a318d02d737447d99143fef5056f63" name="libteam-devel" arch="x86_64">
  <version epoch="0" ver="1.31" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.31-2" date="1662638400">- fix error options in doc</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.31-3" date="1695297600">- fix an issue about teamd is using 100% cpu usage (of 1 core)</changelog>
</package>
<package pkgid="c4d12d95fd6ad66df040c799d71797d6a258a95d3755f4680762321b1d23670f" name="libteam-help" arch="x86_64">
  <version epoch="0" ver="1.31" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.31-2" date="1662638400">- fix error options in doc</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.31-3" date="1695297600">- fix an issue about teamd is using 100% cpu usage (of 1 core)</changelog>
</package>
<package pkgid="088f3458f599cabfceebee196db110f7974032221c9afd525e6f66f9456e9ac2" name="libtidy" arch="x86_64">
  <version epoch="0" ver="5.7.28" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.7.28-2" date="1703764800">- Fix CVE-2021-33391</changelog>
</package>
<package pkgid="274700b3ae59c5185667694eccc56a8d9f3377cf07b73e2a95b0eee9e4029eec" name="libtidy-devel" arch="x86_64">
  <version epoch="0" ver="5.7.28" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.7.28-2" date="1703764800">- Fix CVE-2021-33391</changelog>
</package>
<package pkgid="947d425c68485078ea7d67677db546defc6239c85924ed5b29814aa68ed1b3a5" name="libtiff" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="24.oe2203sp1"/>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 4.3.0-15" date="1655208000">- fix CVE-2022-1622 and CVE-2022-1623</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
</package>
<package pkgid="d91e318437091884a945a46e618d75ba7e62e9afe646b04bed2b01e1528ff8d4" name="libtiff" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="25.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
</package>
<package pkgid="308bbbf56d28773000e0d2bbd29c85d43217e3b272c95641929b37605076a16b" name="libtiff" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="27.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
</package>
<package pkgid="2151a084fc31585f80777cae754ffff1e04dd9ac1086144db370d20df08af5c5" name="libtiff" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="28.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
</package>
<package pkgid="76295f61febd8241e64d492e27dea223a220c4679c1fe384b5f2b588e8b5e5c9" name="libtiff" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="29.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
</package>
<package pkgid="d6f52b3e64d57366c42c8c75b451d998299052739d99f8bf5bc01d62cd0bf7ec" name="libtiff" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="30.oe2203sp1"/>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
</package>
<package pkgid="2017e9c218faf3d417994ef6d45cb8817a6dd610d9e9f9165ff68899ad7c1c6f" name="libtiff" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="31.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
</package>
<package pkgid="db497ad15320a372f5edea45a7fa1f31270b915ebacbd0188d29377945cbb687" name="libtiff" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="32.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
</package>
<package pkgid="6e934f0b9f09f3a02e7e9a7829fcb28f6acaadb790e7cc5a00e796663d92a12e" name="libtiff" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="34.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
</package>
<package pkgid="f1b62565f9913604d998820938d1376b73cf68233d3dd9c3e915ddd42fd66d6d" name="libtiff" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="36.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
</package>
<package pkgid="434c6d09aabfa04dff0a481a2583a969a3b9bb5c81c606c42fdf0c4a04ebf3be" name="libtiff" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="37.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-37" date="1716206400">- Type:CVE
- ID:CVE-2023-1916,CVE-2023-3164
- SUG:NA
- DESC:fix CVE-2023-1916 CVE-2023-3164</changelog>
</package>
<package pkgid="a1887a6d7fc923cab61d80e9e8229251d39971641112f8cb1fd48df18e918a8c" name="libtiff-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="24.oe2203sp1"/>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 4.3.0-15" date="1655208000">- fix CVE-2022-1622 and CVE-2022-1623</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
</package>
<package pkgid="5647cc11e28dba2e9ec9a7ea50102d7f6c3636b2e79e1a26815bda1b1a328728" name="libtiff-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="25.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
</package>
<package pkgid="7aec536965de4bb24716b1fe41d2b2eeabd30b257950e568cf1cc486230d6b41" name="libtiff-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="27.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
</package>
<package pkgid="d8e37d8244f70ea3d85c14a8ec71f8c94c7d0dc1b630dfd44e5e602954e90e2c" name="libtiff-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="28.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
</package>
<package pkgid="2c3ae4bbb542477f829f8d1e56617a9c5b4cbf348ec695d9a9df8d0659f9ffd5" name="libtiff-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="29.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
</package>
<package pkgid="600997044fc3c194eddf10ad51246248741a4724b2a936bd98249789c4931e96" name="libtiff-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="30.oe2203sp1"/>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
</package>
<package pkgid="c3333c5568ff58597cf8939b2a95640d728299d8346bc707a6340881406b01df" name="libtiff-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="31.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
</package>
<package pkgid="14b2280dc7eb65776fee071ae3cc133bd34ba0185b444a7be506deacbb3ca189" name="libtiff-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="32.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
</package>
<package pkgid="d81e4956a91e9e3ccce3f99468f0dc28f01b1207c8378fef26a83fcbde992f9b" name="libtiff-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="34.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
</package>
<package pkgid="b53098307c44296067b97d0af627f9bf254d674ced690a0b2e54d452344e7d45" name="libtiff-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="36.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
</package>
<package pkgid="a6901a21805f252861d00fee35f54d1a89587874cf7ef4b40809b6467533187b" name="libtiff-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="37.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-37" date="1716206400">- Type:CVE
- ID:CVE-2023-1916,CVE-2023-3164
- SUG:NA
- DESC:fix CVE-2023-1916 CVE-2023-3164</changelog>
</package>
<package pkgid="d147c2d84b40184541d2bcddc27ece999c504be71be32f6ffa7177a5edf4906d" name="libtiff-debugsource" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="24.oe2203sp1"/>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 4.3.0-15" date="1655208000">- fix CVE-2022-1622 and CVE-2022-1623</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
</package>
<package pkgid="5934ffe7faf796a9690580d635b700bc051168116a1eb90027d16d0ac51feb92" name="libtiff-debugsource" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="25.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
</package>
<package pkgid="55e604be4be4e2927d24a1befdf1566c173b7c93a66c448abcd0845ab02cbbd4" name="libtiff-debugsource" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="27.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
</package>
<package pkgid="45c5c333d5f0d78a253f6b19bb024c799e9d5c2ddc49d4c1f869f9f529448824" name="libtiff-debugsource" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="28.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
</package>
<package pkgid="966070ba4f6d382247a89ee1482d27129396aee428f142da89f91a3d46a54b4e" name="libtiff-debugsource" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="29.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
</package>
<package pkgid="0465ed8f0afe6fe2cacd87c3ad133bbd12ed983890f1bea733d0c952746f6a31" name="libtiff-debugsource" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="30.oe2203sp1"/>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
</package>
<package pkgid="599d1b789ac13ed28c342a1cab5acaa04e4b5788fd4a070d91413b66d7d8cd45" name="libtiff-debugsource" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="31.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
</package>
<package pkgid="af4063053de1cf9f65362595246929ab3eab664ad76e55852aa5283d2992be42" name="libtiff-debugsource" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="32.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
</package>
<package pkgid="95a6083d594c013eaeb8de177453a193be3547f836f6b79f7f794fd87b83205b" name="libtiff-debugsource" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="34.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
</package>
<package pkgid="f33228fbbfd19aeec4fa5f293dbc74da8f106017bacdd3f7ea71b15217d4dbce" name="libtiff-debugsource" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="36.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
</package>
<package pkgid="6abd06f5fb767d088624a0324e922111dd018955da5c9523a0858c036b252e1d" name="libtiff-debugsource" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="37.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-37" date="1716206400">- Type:CVE
- ID:CVE-2023-1916,CVE-2023-3164
- SUG:NA
- DESC:fix CVE-2023-1916 CVE-2023-3164</changelog>
</package>
<package pkgid="96be590e8efa9682450833076e76276ed5529a5a256b7641f19dd71a438ac6e4" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="24.oe2203sp1"/>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 4.3.0-15" date="1655208000">- fix CVE-2022-1622 and CVE-2022-1623</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
</package>
<package pkgid="abc14b78a431b7eaef1ea57fedf67f7a6402cf1fdc748c80c2818366c13a6f5f" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="25.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
</package>
<package pkgid="5cb12c55416b2355bd924f4f54fbb87ca6a5165425e38e6c5f73b52a463d96ae" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="27.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
</package>
<package pkgid="1643f3159656a23bae52e1a742cb3564a328c64706c64d6f746650c919bd1fd1" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="28.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
</package>
<package pkgid="da16cea491a81e65e3ac8335454a83551c1cb98a198814b9eac18d8849ac9fc4" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="29.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
</package>
<package pkgid="b589a2c4f052af7d79af85c65abfcc294db0e0861976777085def31d426f6d33" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="30.oe2203sp1"/>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
</package>
<package pkgid="f2dbec8b14467e52d9989c69bf23771112e0ffd1ade8213b07ee1d25c7ab6824" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="31.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
</package>
<package pkgid="9580caa37c36e03f553c82fb732d886817c93aa8b7182b03ad1fdcc9ef48e801" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="32.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
</package>
<package pkgid="5fe4989c470b01c8e993d00c91f814b1b223d9874c3ad4d2f49ee0eb2d650ce5" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="34.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
</package>
<package pkgid="ba340f5bc79f0ec582e3be0a3ea078b546dcaf9a6aa46983cb74aa910a628667" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="36.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
</package>
<package pkgid="4dee6561e5d128364057eb3903d763459cd336cad9e4c1d4a993c1b9393773c4" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="37.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-37" date="1716206400">- Type:CVE
- ID:CVE-2023-1916,CVE-2023-3164
- SUG:NA
- DESC:fix CVE-2023-1916 CVE-2023-3164</changelog>
</package>
<package pkgid="46c6038f1f2049f64ed608c3fb86906d8397cae7a8af5e542fa7f404a565787a" name="libtiff-help" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="24.oe2203sp1"/>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 4.3.0-15" date="1655208000">- fix CVE-2022-1622 and CVE-2022-1623</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
</package>
<package pkgid="c4f41ece929d9de240881959b1b31f149bcea0c05ca7417b6512ade29964c5a5" name="libtiff-help" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="25.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
</package>
<package pkgid="d748c01d5c5e46e225649759623e06e08006e377e69db4fd3478c6ab59f73caa" name="libtiff-help" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="27.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
</package>
<package pkgid="0f7457b168f9a005af4c5d7f9271a42858745b2e533f874c7da1de0967363596" name="libtiff-help" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="28.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
</package>
<package pkgid="433375fc505cf871f01ff277926b5bcb0dd94abe0398c274c0c9eb26a7a0263c" name="libtiff-help" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="29.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
</package>
<package pkgid="254c03a91aa5c9c05e91ad288c68aacf5b1cccf1e6c5d3501891de172faabcd0" name="libtiff-help" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="30.oe2203sp1"/>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
</package>
<package pkgid="1abc41bd3a11fb29d7c284ccc1d324a261d887514cc66ca5b49d7b57bfc53f06" name="libtiff-help" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="31.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
</package>
<package pkgid="8b51bcfeb47803a6a214fc771f2429cdf8f5dffcd32f0a3708fc058a51b7e4ed" name="libtiff-help" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="32.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
</package>
<package pkgid="59cca4b5d06540cc18e54eee071060012269cc7f8cb9eaf0b2f7114ae1365435" name="libtiff-help" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="34.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
</package>
<package pkgid="15b2b53250e2609e83ef03899f1fc4bf00b01eb3e868c5442534363c98ce6279" name="libtiff-help" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="36.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
</package>
<package pkgid="d29dc798350df39b989d9201e1b725adfe3e7829f41b2b309c000da49b6fd82a" name="libtiff-help" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="37.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-37" date="1716206400">- Type:CVE
- ID:CVE-2023-1916,CVE-2023-3164
- SUG:NA
- DESC:fix CVE-2023-1916 CVE-2023-3164</changelog>
</package>
<package pkgid="c16aafe9df9da3748769255aab3e6e65b0e0a0a62862684058a78681f0d2b7ae" name="libtiff-static" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="24.oe2203sp1"/>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 4.3.0-15" date="1655208000">- fix CVE-2022-1622 and CVE-2022-1623</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
</package>
<package pkgid="68476a8c424d54a7a27e9cc439258d4f0a95ce71433298eb6eaa19948a446f4e" name="libtiff-static" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="25.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
</package>
<package pkgid="f07e700c097b5178c481e9f0e91062083eb697cbacbf75f3b7aa40956daf5ccb" name="libtiff-static" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="27.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
</package>
<package pkgid="e67154a332aa86f9f4e876dfa0ce5ed0451077074fd4adb4218cd5c91e3faf37" name="libtiff-static" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="28.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
</package>
<package pkgid="cdb09d17a13705028b4536cc6454a2779952dea401983b03bfef48ee4ce6dd04" name="libtiff-static" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="29.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
</package>
<package pkgid="6d530e13729a5065dea960273718ca3d46484b90122cb38e2c82510b91a40039" name="libtiff-static" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="30.oe2203sp1"/>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
</package>
<package pkgid="6f44b9a96addc456bac74c5a5fcaaff8c4466a9e361a1b0d0d7aa3983c8813dc" name="libtiff-static" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="31.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
</package>
<package pkgid="d70b155915f7c853e2f5b6977c7a77f78794a6bfd9b719df843073f056b8ddd5" name="libtiff-static" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="32.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
</package>
<package pkgid="b0425f88b154a2960e8b64152832cc57413d7cafcb892afb49ac1abc2ffbefe2" name="libtiff-static" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="34.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
</package>
<package pkgid="aeeaef3f828e312c711ca5461a7173621bec85bc1178722d672a9cb5c46ef108" name="libtiff-static" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="36.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
</package>
<package pkgid="03d0cfab0bce1eef965b8b2896a4ff24f0b58e80eccfa0e0e55c6d1cf5ba674c" name="libtiff-static" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="37.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-37" date="1716206400">- Type:CVE
- ID:CVE-2023-1916,CVE-2023-3164
- SUG:NA
- DESC:fix CVE-2023-1916 CVE-2023-3164</changelog>
</package>
<package pkgid="60a16be7c0d031ccc86f745d2e59e531280b499258aae5aced8261544a0b1afe" name="libtiff-tools" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="24.oe2203sp1"/>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 4.3.0-15" date="1655208000">- fix CVE-2022-1622 and CVE-2022-1623</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
</package>
<package pkgid="33b546a85619247be4c632e58a48835ac169905deafb5a5fd5d4da0d942b821f" name="libtiff-tools" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="25.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
</package>
<package pkgid="4d1cc2dc00f8fae2113e6350a483230826086bb349527e02372f8d052b50b3aa" name="libtiff-tools" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="27.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
</package>
<package pkgid="9bf680ef3d7cf044b68d8e64fde4efe218bbcef63a14141f0cee93a870e710f9" name="libtiff-tools" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="28.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
</package>
<package pkgid="c18285578be2aa1bd5aa402fbc69b9f978fffa35e270ea16a29f09c674597843" name="libtiff-tools" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="29.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
</package>
<package pkgid="10811a3575abaa9c798f132a223f8015c4e518b18e13f63afd1340efc1a5c036" name="libtiff-tools" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="30.oe2203sp1"/>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
</package>
<package pkgid="7ecc92b9ac87ec3380af49619d6f5afd421e90bc3cbf185d9f44cf1c807f76f2" name="libtiff-tools" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="31.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
</package>
<package pkgid="b81e9de5e88c1722f2f2288cd65dd7e7c75be6df1e0cb2f045a5a61a7974076a" name="libtiff-tools" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="32.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
</package>
<package pkgid="3cc0affb1af2383084a511fad5a8c64d154608a9bfc6a6f32dc3f359c15cefb6" name="libtiff-tools" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="34.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
</package>
<package pkgid="a3db760a253f1430aed711f4b67137a3c8b334496c0cc7e0dae45cf3207a3d34" name="libtiff-tools" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="36.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
</package>
<package pkgid="40c19d59b74af89f902c264912e0f07ebc629dfbbbed51d8fd9093181eca8086" name="libtiff-tools" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="37.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-37" date="1716206400">- Type:CVE
- ID:CVE-2023-1916,CVE-2023-3164
- SUG:NA
- DESC:fix CVE-2023-1916 CVE-2023-3164</changelog>
</package>
<package pkgid="88cf50652dcca7b4a0c8cca80e2104a09fea6b71cf0339cb2275985c4d133150" name="libtirpc" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.3.2-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update libtirpc to 1.3.2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-2" date="1658491200">- Type:CVE
- ID:CVE-2021-46828
- SUG:NA
- DESC:fix CVE-2021-46828</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="82d3a0256f1039f9abca735faaf36a4d7368b919ead03ff7cf5b880158b2cddb" name="libtirpc" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.3.2-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update libtirpc to 1.3.2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-2" date="1658491200">- Type:CVE
- ID:CVE-2021-46828
- SUG:NA
- DESC:fix CVE-2021-46828</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-4" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove useless dependency man-db</changelog>
</package>
<package pkgid="7d96d31851447416b997d5a63f846a3daa3251ac117a96f429b4d70fb1d1b467" name="libtirpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.3.2-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update libtirpc to 1.3.2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-2" date="1658491200">- Type:CVE
- ID:CVE-2021-46828
- SUG:NA
- DESC:fix CVE-2021-46828</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="ceda1a3ed51af8858c1d62e339de5ba08d51400a133005dec9cb777c47319e33" name="libtirpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.3.2-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update libtirpc to 1.3.2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-2" date="1658491200">- Type:CVE
- ID:CVE-2021-46828
- SUG:NA
- DESC:fix CVE-2021-46828</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-4" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove useless dependency man-db</changelog>
</package>
<package pkgid="101a88c09b1e19244b4bfed689e06200489e8ed0244cc6844dc998229702a463" name="libtirpc-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.3.2-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update libtirpc to 1.3.2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-2" date="1658491200">- Type:CVE
- ID:CVE-2021-46828
- SUG:NA
- DESC:fix CVE-2021-46828</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="004433e18fe56f87527cc0499b3d96f401edc0d200f87943ff10a89a325146fd" name="libtirpc-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.3.2-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update libtirpc to 1.3.2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-2" date="1658491200">- Type:CVE
- ID:CVE-2021-46828
- SUG:NA
- DESC:fix CVE-2021-46828</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-4" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove useless dependency man-db</changelog>
</package>
<package pkgid="ec0c52784fb51bee7ecf07f90101706baff43ae2efba3b67f9c0ff5fd3a817ef" name="libtirpc-devel" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.3.2-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update libtirpc to 1.3.2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-2" date="1658491200">- Type:CVE
- ID:CVE-2021-46828
- SUG:NA
- DESC:fix CVE-2021-46828</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="269f4911c90ccf9b2549247978be0b9a8546c2014a45dc2d02e0951cb096b31c" name="libtirpc-devel" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.3.2-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update libtirpc to 1.3.2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-2" date="1658491200">- Type:CVE
- ID:CVE-2021-46828
- SUG:NA
- DESC:fix CVE-2021-46828</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-4" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove useless dependency man-db</changelog>
</package>
<package pkgid="d49e7a058e2945acefd2db053486e31d9a314d5315b6bf3fb8d02ea154a54447" name="libtirpc-help" arch="noarch">
  <version epoch="0" ver="1.3.2" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.3.2-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update libtirpc to 1.3.2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-2" date="1658491200">- Type:CVE
- ID:CVE-2021-46828
- SUG:NA
- DESC:fix CVE-2021-46828</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="9a68dccc85857d4103b89c34e9fb6ebf5f5c65ca2022d6f37196d78b2f641d22" name="libtirpc-help" arch="noarch">
  <version epoch="0" ver="1.3.2" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.3.2-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update libtirpc to 1.3.2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-2" date="1658491200">- Type:CVE
- ID:CVE-2021-46828
- SUG:NA
- DESC:fix CVE-2021-46828</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-4" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove useless dependency man-db</changelog>
</package>
<package pkgid="9576f916bb7c3f7e0673580ada02943c7ed63ffa01b6aa13fda4982757293b83" name="libtommath" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.0-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.2.0-3" date="1680091200">- enable check test suite</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.2.0-4" date="1693828800">- Fix CVE-2023-36328</changelog>
</package>
<package pkgid="fa5963615008ff6f20e52641ae650e9406ac5ec9e79933695630f7b76cbe781b" name="libtommath-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.0-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.2.0-3" date="1680091200">- enable check test suite</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.2.0-4" date="1693828800">- Fix CVE-2023-36328</changelog>
</package>
<package pkgid="674e41b30550dbbe431df1b2201fd55ac23e3b069e18c883c1a405478c5727e7" name="libtommath-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.0-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.2.0-3" date="1680091200">- enable check test suite</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.2.0-4" date="1693828800">- Fix CVE-2023-36328</changelog>
</package>
<package pkgid="9496e0f322b504c60607132c21fe129bb25ba5039f2e87225d910c2ad2ad7304" name="libtommath-devel" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.0-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.2.0-3" date="1680091200">- enable check test suite</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.2.0-4" date="1693828800">- Fix CVE-2023-36328</changelog>
</package>
<package pkgid="4eebe1670e8b1795e1bc6ca0c9bd93955156391e94433131b9a7f0f81fadf0a0" name="libtommath-help" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.0-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.2.0-3" date="1680091200">- enable check test suite</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.2.0-4" date="1693828800">- Fix CVE-2023-36328</changelog>
</package>
<package pkgid="cc326f3334f3d5f340b6f06af45187a4e8d6c013a2e6410b67b2ccda88ad4da9" name="libtpms" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="8.oe2203sp1"/>
  <changelog author="jiangfangjie &lt;jiangfangjie@huawei.com&gt; - 0.7.3-5" date="1636545600">-TYPE: CVE
-ID:NA
-ID:NA
-DESC: fix CVE-2021-3746</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 0.7.3-6" date="1644840000">- fix bare word "debug" in spec</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 0.7.3-7" date="1652875200">- tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
- tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
- tpm2: Restore original value if unmarsalled value was illegal
- fix CVE-2021-3623</changelog>
  <changelog author="jiangfangjie &lt;jiangfangjie@huawei.com&gt; - 0.7.3-8" date="1684324800">- fix CVE-2023--1018 and CVE-2023-1017</changelog>
</package>
<package pkgid="78240e987b07a156c22192db3d13f5cb07ddf3f2d0cac91522bd5a59f1b7673d" name="libtpms-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="8.oe2203sp1"/>
  <changelog author="jiangfangjie &lt;jiangfangjie@huawei.com&gt; - 0.7.3-5" date="1636545600">-TYPE: CVE
-ID:NA
-ID:NA
-DESC: fix CVE-2021-3746</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 0.7.3-6" date="1644840000">- fix bare word "debug" in spec</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 0.7.3-7" date="1652875200">- tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
- tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
- tpm2: Restore original value if unmarsalled value was illegal
- fix CVE-2021-3623</changelog>
  <changelog author="jiangfangjie &lt;jiangfangjie@huawei.com&gt; - 0.7.3-8" date="1684324800">- fix CVE-2023--1018 and CVE-2023-1017</changelog>
</package>
<package pkgid="eda80d53e7a9befff0416fa92292967ba25cd8917fcf5bc17773eae257092ac3" name="libtpms-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="8.oe2203sp1"/>
  <changelog author="jiangfangjie &lt;jiangfangjie@huawei.com&gt; - 0.7.3-5" date="1636545600">-TYPE: CVE
-ID:NA
-ID:NA
-DESC: fix CVE-2021-3746</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 0.7.3-6" date="1644840000">- fix bare word "debug" in spec</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 0.7.3-7" date="1652875200">- tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
- tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
- tpm2: Restore original value if unmarsalled value was illegal
- fix CVE-2021-3623</changelog>
  <changelog author="jiangfangjie &lt;jiangfangjie@huawei.com&gt; - 0.7.3-8" date="1684324800">- fix CVE-2023--1018 and CVE-2023-1017</changelog>
</package>
<package pkgid="4c1e3f90489c2f8a2328b6bae36d9ed2841fd8220f6ed00255cfec4390675c3b" name="libtpms-devel" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="8.oe2203sp1"/>
  <changelog author="jiangfangjie &lt;jiangfangjie@huawei.com&gt; - 0.7.3-5" date="1636545600">-TYPE: CVE
-ID:NA
-ID:NA
-DESC: fix CVE-2021-3746</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 0.7.3-6" date="1644840000">- fix bare word "debug" in spec</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 0.7.3-7" date="1652875200">- tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
- tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
- tpm2: Restore original value if unmarsalled value was illegal
- fix CVE-2021-3623</changelog>
  <changelog author="jiangfangjie &lt;jiangfangjie@huawei.com&gt; - 0.7.3-8" date="1684324800">- fix CVE-2023--1018 and CVE-2023-1017</changelog>
</package>
<package pkgid="66fa43dc91c964531bbb2b0009c509d536611e27d91bac7d9129bf08712c1104" name="libtraceevent" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="3.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 1.2.1-1" date="1642161600">- Init package</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.2.1-2" date="1670241600">- Add -fstack-protector-strong compile options</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.2.1-3" date="1674129600">- Add conflict with perf</changelog>
</package>
<package pkgid="c55a0266b2bd93a009aa6c3429408dc78fa73ccbfb7672e5fa79a2d6133d6d14" name="libtraceevent-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="3.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 1.2.1-1" date="1642161600">- Init package</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.2.1-2" date="1670241600">- Add -fstack-protector-strong compile options</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.2.1-3" date="1674129600">- Add conflict with perf</changelog>
</package>
<package pkgid="dbb5d8602cee74d6ac7e17d25e719ade3ca09209bd5897cc5c86e194aba13287" name="libtraceevent-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="3.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 1.2.1-1" date="1642161600">- Init package</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.2.1-2" date="1670241600">- Add -fstack-protector-strong compile options</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.2.1-3" date="1674129600">- Add conflict with perf</changelog>
</package>
<package pkgid="009e108d2335fafaf73a8a8db86b9c865a1f0a3801ff214eb4a2f660283e3bc4" name="libtraceevent-devel" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="3.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 1.2.1-1" date="1642161600">- Init package</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.2.1-2" date="1670241600">- Add -fstack-protector-strong compile options</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.2.1-3" date="1674129600">- Add conflict with perf</changelog>
</package>
<package pkgid="d3661e38609d96e7a4b89f62877d6b3fe21ba05ac2162a7f093fab9f7f36350f" name="libtsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="d0e8a97ff6ea890fba0f8edbe6e2db34352e5238607a9a657f53dd31871d5bf6" name="libtsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="1f6d92e4aa3ed9d60fa4c59cb189a4067022e5fab262360db5cc102c27a27df9" name="libtsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="7ecd5f4c7f05d16877f3fb4083d9880260106f22bcc109023aaa736b13b116f3" name="libtsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="156374250c04e8f5e6006c7a231c536b604391987bffc0341eb879adc73459a3" name="libtsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="48f88c3a2b684c29ee09e6031ebf8f1684db471f2bbccce776746c0216dabbdf" name="libtsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="21b3c0ed92e6a0ea49a615a8d060281a6aac2da52be9a044fbe4127c8022bc7e" name="libtsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="f2c5ca5ed67531d88d490419087e30cc4ee0d8293ebe7851f49549c44a9e065b" name="libtsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="ef8915c095d425b88058154ca23eb38e80e36b6139b84102b75e35582d66dd9d" name="libtsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="dac8fc951ae210f296fbed22ff20820e097c48291ceeddb4fadd792f2e9404ae" name="libtsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="8957dd8492d47e364b4aa2ad2e0ee9da5c486e7bea4cbaad75fa815cdc3df005" name="libtsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="d56623d47279d2d9a648381ae378d2dd5d496dc04e751654169453c0db83a146" name="libtsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="82378e1483850f1200dd4d5f3172230f4e26241f4fd1bf2757471f551a1cb723" name="libubsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="1761704e6ffe60d9401c21b571c9bfc647832a174eeb88d96d1d38cbaec9d0de" name="libubsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="dcd719a3c520ce482e3f5a5c65bf74e756b7e872f7ae1396dfcd1f1c0d8b4ae7" name="libubsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="72a06e3e0603f8d0b108085d969f09519f0bb1c1300518bc4432acf76642d5b6" name="libubsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="f140a13da76c3ed868228b82ff5fdb2342a92df3bb15eedb34431945073d1420" name="libubsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="993fe301c346078fd46e9b28c35097333e40a2e74a8b7548dab3742feff2f36f" name="libubsan" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="b33d7e0d44724484a95d1a546586cb10fe87445fe59c84d260a3d54e301345f5" name="libubsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="eed24ab96f9a9cc181448a93246ffd59dcf000d25a8b5975e5500d090bf4ae41" name="libubsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="d1bc3dad6c25b2239ccb36c48e8031da814f5c75407a4d83615cd17c32bb1279" name="libubsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="045ce9c3ff9124081db65e4150e95d834a8687fb1a22d5e7058f8ecc74de73b9" name="libubsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="026b10c39527d2ed60aa7d20c0ce2625e3f18d4c304b659f3f605e690f50b746" name="libubsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="26be9af26520140599b597349fd4215fc48c0ee29d699ca65011e485805a85c5" name="libubsan-static" arch="x86_64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="a6cb3c47d59a772f4d2aaaf590c6fbd2426fcea456ac30b5111f715d5e44641d" name="libusal" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="51.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.1.11-46" date="1666699200">- rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.1.11-47" date="1667476800">- add sw64 patch</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-48" date="1668600000">- fix empty link</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-49" date="1669204800">- fix spell error</changelog>
  <changelog author="yueyuankun&lt;yueyuankun@kylinos.cn&gt; - 1.1.11-50" date="1698667200">- Type:update
- ID:NA
- SUG:NA
- DESC:delete Requires git</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 1.1.11-51" date="1704369600">- Type:bugfix
- ID:NA
- SUG:NA
- delete autosetup macro in changelog</changelog>
</package>
<package pkgid="aac5c195676fee2cc1e558764418da3e9679002d29dac822c4c299ec1fbecd65" name="libuuid" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="28.oe2203sp1"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-19" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
       backport-write-correctly-handle-wide-characters.patch
       backport-wall-convert-homebrew-buffering-to-open_memstream.patch
       backport-wall-use-fputs_careful.patch
       backport-hexdump-parse-handle-truncated-format-pattern.patch
       backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
       backport-lscpu-fix-p-output-all-caches-delimiter.patch
       backport-add-return-in-supam_conv-function.patch
       backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
       backport-sulogin-ignore-none-existing-console-devices.patch
       backport-sulogin-fix-KDGKBMODE-ifdef.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-20" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
       backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-21" date="1691064000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libblkid-jfs-avoid-undefined-shift.patch
       backport-cfdisk-add-hint-about-labels-for-bootable-flag.patch
       backport-logger-initialize-socket-credentials-contol-union.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-22" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-column-fix-buffer-overflow-when-l-specified.patch
       backport-column-fix-greedy-mode-on-l.patch
       backport-column-fix-memory-leak.patch
       backport-column-fix-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-23" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-scriptreplay-support-ctrl-s-and-ctrl-g.patch
       backport-login-use-correct-terminal-fd-during-setup.patch
       backport-login-prevent-undefined-ioctl-and-tcsetattr-calls.patch
       backport-libblkid-avoid-memory-leak-of-cachefile-path.patch
       backport-more-avoid-out-of-bound-access.patch
       backport-lslogins-fix-realloc-loop-allocation-size.patch
       backport-ldattach-don-t-call-exit-from-signal-handler.patch
       backport-libblkid-ntfs-validate-that-sector_size-is-a-power-o.patch
       backport-blkid-fix-call-to-err_exclusive_options.patch
       backport-libblkid-reset-errno-before-calling-probefuncs.patch
       backport-lib-path-fix-possible-out-of-boundary-access.patch
       backport-libmount-improve-mnt_table_next_child_fs.patch
       backport-libmount-fix-possible-NULL-dereference-coverity-scan.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-24" date="1705406400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
	backport-libsmartcols-flush-correct-stream.patch
	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
	backport-cal-avoid-out-of-bound-write.patch
	backport-libfdisk-sun-properly-initialize-partition-data.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-25" date="1708344000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:solve the issue of ext4 is incorrectly probed as drbd
        [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
        backport-libblkid-probe-read-data-in-chunks.patch
        backport-libblkid-avoid-aligning-out-of-probing-area.patch
        backport-libblkid-drbd-validate-zero-padding.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-26" date="1709899200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
       backport-libblkid-hfsplus-reduce-false-positive.patch
       backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
       backport-libblkid-drbd-reduce-false-positive.patch
       backport-lib-cpuset-exit-early-from-cpulist_parse.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-27" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
       backport-libblkid-Check-offset-in-LUKS2-header.patch
       backport-more-fix-poll-use.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-28085
- SUG:NA
- DESC:fix CVE-2024-28085</changelog>
</package>
<package pkgid="02be3fc74caf4eb94cf95ce4d727dbd118a6b395a555587ab54ed1e3f684baf4" name="libuv" arch="x86_64">
  <version epoch="1" ver="1.42.0" rel="8.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.42.0-2" date="1655726400">- enable check</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-3" date="1670500800">- skip some test</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-4" date="1671105600">- add make to buildrequires</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 1:1.42.0-5" date="1671278400">- add sw64 architecture</changelog>
  <changelog author="caofei &lt;caofei@xfusion.com&gt; -  1:1.42.0-6" date="1673092800">- fix typo in test-tty-escape-sequence-processing.c</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-7" date="1682337600">- fix Obsoletes in spec and remove ldconfig_scriptlets from check</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-8" date="1708257600">- fix CVE-2024-24806</changelog>
</package>
<package pkgid="4f200a12cedd0887f499077585b0d12aa99126980b185d13d0fb2ca116500ca0" name="libuv-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.42.0" rel="8.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.42.0-2" date="1655726400">- enable check</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-3" date="1670500800">- skip some test</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-4" date="1671105600">- add make to buildrequires</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 1:1.42.0-5" date="1671278400">- add sw64 architecture</changelog>
  <changelog author="caofei &lt;caofei@xfusion.com&gt; -  1:1.42.0-6" date="1673092800">- fix typo in test-tty-escape-sequence-processing.c</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-7" date="1682337600">- fix Obsoletes in spec and remove ldconfig_scriptlets from check</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-8" date="1708257600">- fix CVE-2024-24806</changelog>
</package>
<package pkgid="1b0c96476107d1840846b7bcdb17ae57c00f381708b8e0d69ca6e5108b5091bb" name="libuv-debugsource" arch="x86_64">
  <version epoch="1" ver="1.42.0" rel="8.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.42.0-2" date="1655726400">- enable check</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-3" date="1670500800">- skip some test</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-4" date="1671105600">- add make to buildrequires</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 1:1.42.0-5" date="1671278400">- add sw64 architecture</changelog>
  <changelog author="caofei &lt;caofei@xfusion.com&gt; -  1:1.42.0-6" date="1673092800">- fix typo in test-tty-escape-sequence-processing.c</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-7" date="1682337600">- fix Obsoletes in spec and remove ldconfig_scriptlets from check</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-8" date="1708257600">- fix CVE-2024-24806</changelog>
</package>
<package pkgid="440533d903d5bb6161e5412b98237d938d574708a1e1fdeb60434b0dd86a1ae7" name="libuv-devel" arch="x86_64">
  <version epoch="1" ver="1.42.0" rel="8.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.42.0-2" date="1655726400">- enable check</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-3" date="1670500800">- skip some test</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-4" date="1671105600">- add make to buildrequires</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 1:1.42.0-5" date="1671278400">- add sw64 architecture</changelog>
  <changelog author="caofei &lt;caofei@xfusion.com&gt; -  1:1.42.0-6" date="1673092800">- fix typo in test-tty-escape-sequence-processing.c</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-7" date="1682337600">- fix Obsoletes in spec and remove ldconfig_scriptlets from check</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-8" date="1708257600">- fix CVE-2024-24806</changelog>
</package>
<package pkgid="b291f030b628137dc403b2d589a9cc7744cd940292f66fd0e2ae68b8334b49e9" name="libuv-help" arch="noarch">
  <version epoch="1" ver="1.42.0" rel="8.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.42.0-2" date="1655726400">- enable check</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-3" date="1670500800">- skip some test</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-4" date="1671105600">- add make to buildrequires</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 1:1.42.0-5" date="1671278400">- add sw64 architecture</changelog>
  <changelog author="caofei &lt;caofei@xfusion.com&gt; -  1:1.42.0-6" date="1673092800">- fix typo in test-tty-escape-sequence-processing.c</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-7" date="1682337600">- fix Obsoletes in spec and remove ldconfig_scriptlets from check</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-8" date="1708257600">- fix CVE-2024-24806</changelog>
</package>
<package pkgid="23950b3b1da4dca1119f8a7a74a19be5a474ba1b7fa8f96780e219d28d4f1c4c" name="libva" arch="x86_64">
  <version epoch="0" ver="2.20.0" rel="1.oe2203sp1"/>
  <changelog author="mengwenhua&lt;mengwenhua@xfusion.com&gt; - 2.13.0-2" date="1673265600">- Add the missing trace log for the VA encoder API.</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.20.0-1" date="1717502400">- Upgrade to 2.20.0
- Fix CVE-2023-39929
- Fix minor issue about printf data type and value range
- av1: Revise offsets comments for av1 encode
- jpeg: add support for crop and partial decode
- Drop no longer applicable vaGetDriverNames check</changelog>
</package>
<package pkgid="a883153991428a90e11cc7f32bbd9f7d993d2407b67fd2afa69b6a1d0666b4be" name="libva-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.20.0" rel="1.oe2203sp1"/>
  <changelog author="mengwenhua&lt;mengwenhua@xfusion.com&gt; - 2.13.0-2" date="1673265600">- Add the missing trace log for the VA encoder API.</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.20.0-1" date="1717502400">- Upgrade to 2.20.0
- Fix CVE-2023-39929
- Fix minor issue about printf data type and value range
- av1: Revise offsets comments for av1 encode
- jpeg: add support for crop and partial decode
- Drop no longer applicable vaGetDriverNames check</changelog>
</package>
<package pkgid="18732c20b79f9796aa671eb9c70e7e74b86e4b777c9f82e0fd92ac1dc09d1449" name="libva-debugsource" arch="x86_64">
  <version epoch="0" ver="2.20.0" rel="1.oe2203sp1"/>
  <changelog author="mengwenhua&lt;mengwenhua@xfusion.com&gt; - 2.13.0-2" date="1673265600">- Add the missing trace log for the VA encoder API.</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.20.0-1" date="1717502400">- Upgrade to 2.20.0
- Fix CVE-2023-39929
- Fix minor issue about printf data type and value range
- av1: Revise offsets comments for av1 encode
- jpeg: add support for crop and partial decode
- Drop no longer applicable vaGetDriverNames check</changelog>
</package>
<package pkgid="31820c084107ef0b1ad828851f5b74cba542d09b682f56fc58a05678bdd21bb5" name="libva-devel" arch="x86_64">
  <version epoch="0" ver="2.20.0" rel="1.oe2203sp1"/>
  <changelog author="mengwenhua&lt;mengwenhua@xfusion.com&gt; - 2.13.0-2" date="1673265600">- Add the missing trace log for the VA encoder API.</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.20.0-1" date="1717502400">- Upgrade to 2.20.0
- Fix CVE-2023-39929
- Fix minor issue about printf data type and value range
- av1: Revise offsets comments for av1 encode
- jpeg: add support for crop and partial decode
- Drop no longer applicable vaGetDriverNames check</changelog>
</package>
<package pkgid="34c5ae8f839b206671363fc7ab9023d9daa5621fbae65bef2d0deb438c294271" name="libvirt" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="23aba4f9e440b2e4b6efdfb01c7dd09f9135b94e224608ee95ea9eacc0cee4a5" name="libvirt" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="ccd9954e5e52c18ad235b23115d4af7b50b5db48132b1de673b44f06ad5d4b34" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="147a10251b62a8604328fffa11e9d9c6e8426287fa5b83dca406cae3278caa02" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="62732ea134596560dfbd650ce418f76d240370ceafd01b622101bf8a87b1e2a2" name="libvirt-bash-completion" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="700f69062a2a3b4d667f54fcdb75c281e20c3c551e773bffcdd23e4a05af29bb" name="libvirt-bash-completion" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="256e33e4c1ecc593834a0f06fa5607dc1d423caa1ccd18bf766e4e41a0a1c0aa" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="04236e40f54aa6475c89e890927248e33bc4b580e1294af94fdadb3ca9a2a4a3" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="144ae25076ed755aab76a418ff094826d7e51aaf14f5b8ea5a531c1f04a6109d" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="ff8490d508a81397dba501558f2ced7721d429feec43c28fd2f6237a01766419" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="82a6818aa4ba42947ecb2fbcb1e9681e457148c57687b1b6eb97d8b32b966e43" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="b2750edff32d9e748287293df67c0eca86157012909585395016dc91e58cdab8" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="31cf1c158af4fc68a8a6c97d76d74ea97da6e07b80ba9719e0f3671f3b7c8d80" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="e7f1ecdd2d6dd31c5b68ae0919728a442408b3ff0bc9a2b69b308e7085ffe5ee" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="8f9865b1815966e5bdf54c5628935231ae5c8350f8eed8cc525a05227922acf9" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="5706dd3ef3ab2b96f293a5835e762e208f57325d18651169ac7fd39f9ef934a0" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="73a13215009284e1a63d6e2162486853a468e115ec205e87a67c80225b2b0291" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="9eba83976f843d43833945945cbfd149d0d1bb1e617fd9a4174cb6bcb3685290" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="aec1aafce10c17410ce210c35f87c4c9c31179285baaa85d6345c16def1815a6" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="481909f5d78b04003d09edd8d1cbf8d0a37ac7606bda464c6a56b77173dcd011" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="f5e67026de6320d036d9c3b57146ea86d09936fd7906cc2d383b69f10363eec4" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="80a2dc45ef5554749f0caf54855f47871b4afdc51bc9d3984d16ac1d5aa705af" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="f64740a9e297e738de4945c4fd6038991a821209c77f5dae1dfde567d0f35a89" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="a1e3a238214073ee273035d54916967255666cd133ba05633bfc85e76854cd89" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="3aa9e292c59c8211169bded16fa9924baffa7d441515c95cf9ef2912f2c7f8a8" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="92c212288e2d40322d1d941fcfdd739a7602998cc5e37754569c377742c57e8c" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="c4fff937d4d4b23aeab5d744c94ec7677863dedbf113c0a06b73744fa6b2eee6" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="a69a80c98c7d82d31417a40bef8fae884b8b439ed5e05903423cd81f76af7b03" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="5842837fdcf6f5c91936ea8426c0466d4b1fad413451967766182196738c7e70" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="b732c8003afd32d6fb9f129b752abee6667061d39cecf2e74b0cea485c9f8ea7" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="2097aaa68510d0f463a4f6cc84ff7affa6d690607c39b336d70d51ec93ec5963" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="04bded7b87ac5095180767ad3d445687dea12836d55becccf1d945da0432a2e1" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="721d53695053f56c5bc2cab8fe6097cd35f2e9e70b848135c9f4411b0f9ab361" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="2a088c9190d736f7b2957be5982f003f325742b9cbe0e763dfc0f4d38883d538" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="69e2cb1430d5040552810aec949553bd054a7b708cdb8ecc215a125de0c68a9b" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="845daaeedd173afb4f32d1dc96c8cee00458b87e807898a55d32dfe62718ed30" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="508ab00577a990dd2d463b39093ff7b8b3796a02929bb1d5eb2c0037b5388126" name="libvirt-daemon-driver-storage-iscsi-direct" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="1334a382287a3465a6be5f611f943711fc45464239f3adea0e0421fd9fe07d36" name="libvirt-daemon-driver-storage-iscsi-direct" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="089b69ce12782c11aad2406253ddb3c1583bca40528d3484082a52fcd0defa29" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="91c57954e16e997063978f9d253e0a366f508748cc52039f9a08895499ce44d0" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="257607fe43bc5a961cbfd99d282e3fc0ee27828264f47190e95664474ca3336a" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="7069b2479a2a1f9bd59b44ee2b9240050151208dae0b13c0666f32aa8392ca29" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="2e9c3e8d096dd66cbdd890f982f2e753c2d41c7f1de3f0991c4e11535c4e3d6d" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="97bdccb3c03e5813f4431cb044ee3f2567641449ac998b7d899efd7de065c750" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="f0452dad353040e8723341d11a61ece694461b6fc4d144b38769bc56063a98b9" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="0c181d5f43503145185b157b8af98b4220f9fdbeb38ee2f477959887915311f4" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="87c6f9ec1682724eda5ab7be30e659557fefc6eb535f0f34b1ca58bbc77cd92f" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="d9b6b1311193ae3138bf02c8161134d036d7f94b8476ef07e667aab59d6f9421" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="08d1fb309b357acc8c9e41c25fcebccbd64e188a8a61f05287a657ad12a1b75c" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="d2e2d76f3747699854d3470a387a3f30ab5f897cb674c89d6e37a2f8e82be8dd" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="911c64dd459130fae4ec04068a63b018c8ce5bf562a4d707e32975882629b22a" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="6382d773c7fbd73d54fa1f8acf3497bdf1e2e1309d5bfe32dd89057de8d9343c" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="748ca2a9762f936fe42df2a11dba530b760517bc92e0186ee6ebe484d43f4a0c" name="libvirt-debugsource" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="3cbc85297a33e0e9092b48af57af7154cfd2154fa792c32c72a9e2af5a943b10" name="libvirt-debugsource" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="84859b865636ab339f06aa7d7044a17b75cd333de836ce05d52a2dfa0db683f4" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="85136caebc52569f605bcc46d6d0b210964d1886ba6727ea6a0e358b79ed6c1f" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="ee244561239c98b792fb3d9967932dc895377ac3af6233efbab3e486bc047d99" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="09c498440e526a0ec98450eeeb108139e67c68a3a1432ee2db82ea95b3106ec0" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="6a4620ee75bc9b0fef33e5c0934c5298a9eb3c3105bcc7df001666370ca51d56" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="9d13803dd87a8425320786298758200a103a57dc39653f7beffba967a7e6e318" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="8c671b5a65bee41db476250d3bd871475c48bfe4b4d964015b60169401f708f8" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="0a155c77fc7ec85c6ae2a11e38487a979b530e3be83f20c96caaff06e0d500ce" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="99c237d8398bfbef439346e751e79986a895076a304f2e798e09d16ec10d80b5" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="8de56cce3560cc1d3f5ca52604210813e260d595599ad5c5f28c91e0c8721696" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="8abdcf879ac25d6ff0d62a0679b4dea4ee73cd1c4713f5bf66431c5c046bf65e" name="libvirt-wireshark" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="80dbb8fbdf5193f4fa24d27e9a793c13c9a639f76e2de292e1bd956237877afb" name="libvirt-wireshark" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="3c425181907b9b85a64fb429038ab0712d15ed5ed9621f7b439feca99836a581" name="libvpx" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="10.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.7.0-9" date="1692705600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.0-10" date="1696161600">- fix CVE-2023-5217 &amp; CVE-2023-44488</changelog>
</package>
<package pkgid="9e86e828460bd2700118d856073e2896ae18437acbb818cd481fcab497a7bd9c" name="libvpx" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="12.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.7.0-9" date="1692705600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.0-10" date="1696161600">- fix CVE-2023-5217 &amp; CVE-2023-44488</changelog>
  <changelog author="hefq343&lt;fengqing.he@shingroup.cn&gt; - 1.7.0-11" date="1710158400">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.7.0-12" date="1717761600">- Fix CVE-2024-5197</changelog>
</package>
<package pkgid="b614881e632e833020c893e98d0b963feee076707fc7c9f53eb611edcafb27c3" name="libvpx-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="10.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.7.0-9" date="1692705600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.0-10" date="1696161600">- fix CVE-2023-5217 &amp; CVE-2023-44488</changelog>
</package>
<package pkgid="1560dbf397c5fb0f26157f60d84669d4c4b5d2aaf16c5faf9e402413ee913c72" name="libvpx-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="12.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.7.0-9" date="1692705600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.0-10" date="1696161600">- fix CVE-2023-5217 &amp; CVE-2023-44488</changelog>
  <changelog author="hefq343&lt;fengqing.he@shingroup.cn&gt; - 1.7.0-11" date="1710158400">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.7.0-12" date="1717761600">- Fix CVE-2024-5197</changelog>
</package>
<package pkgid="05773e3ec50870c8476a136854a65eb89f2b800624bc7f64c5c6cb9b28552d98" name="libvpx-debugsource" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="10.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.7.0-9" date="1692705600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.0-10" date="1696161600">- fix CVE-2023-5217 &amp; CVE-2023-44488</changelog>
</package>
<package pkgid="8c5de46f07c2d3535cb345c28fd2b2edf9b526092cdccc3f4450a75510f4845e" name="libvpx-debugsource" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="12.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.7.0-9" date="1692705600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.0-10" date="1696161600">- fix CVE-2023-5217 &amp; CVE-2023-44488</changelog>
  <changelog author="hefq343&lt;fengqing.he@shingroup.cn&gt; - 1.7.0-11" date="1710158400">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.7.0-12" date="1717761600">- Fix CVE-2024-5197</changelog>
</package>
<package pkgid="5f1cb0b7d3f54154447577037d17dea0735f8d13978ecf8ba23b04c0890ef30d" name="libvpx-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="10.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.7.0-9" date="1692705600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.0-10" date="1696161600">- fix CVE-2023-5217 &amp; CVE-2023-44488</changelog>
</package>
<package pkgid="044af842666f2076412b09f32594d5a00003b1dc9fdf0a579b7ea3e187f49d75" name="libvpx-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="12.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.7.0-9" date="1692705600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.0-10" date="1696161600">- fix CVE-2023-5217 &amp; CVE-2023-44488</changelog>
  <changelog author="hefq343&lt;fengqing.he@shingroup.cn&gt; - 1.7.0-11" date="1710158400">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.7.0-12" date="1717761600">- Fix CVE-2024-5197</changelog>
</package>
<package pkgid="dfb4f9b26c429fc14724bf875fe4cff989f19f87cee88773c252ec89c058da16" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.17.2" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-8" date="1660305600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ldb require version</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-9" date="1661515200">- Type:cves
- ID:CVE-2022-32743
- SUG:NA
- DESC:fix CVE-2022-32743</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-10" date="1661947200">- Type:cves
- ID:CVE-2022-1615
- SUG:NA
- DESC:fix CVE-2022-1615</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
</package>
<package pkgid="c74bf3183c7ace750354cdbb3202767b4a76caba0d3a5faa158b194e04943b3f" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="10.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
</package>
<package pkgid="3ce02bb68029c9b86f87040f8dbb9dec34d36e65b5ae952d4e7f09f2cff16aae" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="11.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-11" date="1705665600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:speeds up the creation of source rpm</changelog>
</package>
<package pkgid="582d6789579fc803343fef997f67dfea050b4c4b22f18cb741b63ffd6fdb1caa" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="2.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
</package>
<package pkgid="91a739abbb22b9f45f659a03ea5a992dbc18085cb0f1cebd8b048836e3ea0136" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
</package>
<package pkgid="c7fdbc55ba34c73d70d814585a4d22923e8b04edf5d939a1f9a3dbc82182dd59" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="6.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
</package>
<package pkgid="bd42e6520764b1a22a695c16c29a5817029ae1ecefb209ae1ab4ea1289217549" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="8.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
</package>
<package pkgid="eb663f8ba82b939fd14f19638889e8622b6b83ed4c8f3a3c0d2573d544fed6c8" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.17.2" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-8" date="1660305600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ldb require version</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-9" date="1661515200">- Type:cves
- ID:CVE-2022-32743
- SUG:NA
- DESC:fix CVE-2022-32743</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-10" date="1661947200">- Type:cves
- ID:CVE-2022-1615
- SUG:NA
- DESC:fix CVE-2022-1615</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
</package>
<package pkgid="ffcda8c93a545acd8e72a3dc6d7dbc8af1b4f5e09310a2377d9bd45c2594b525" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="10.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
</package>
<package pkgid="5ab127e800219c4a4c85bd807078156a18627849cb8a4a2d57b98b5ba7f59b81" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="11.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-11" date="1705665600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:speeds up the creation of source rpm</changelog>
</package>
<package pkgid="57ad1c4e17b02bd3a4e79b2bc25752aa55f769498e78ff303303717f448decc6" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="2.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
</package>
<package pkgid="ef4bec12c0ce9b10e1e41523ffde082da296d558ccc09e6f90a93eb32d1348f0" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
</package>
<package pkgid="226cd476345d80032b73be4d61d0839b3baf8c223898512b1c59abefca96f2ef" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="6.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
</package>
<package pkgid="75e7920777ad041d9283f6dda74f5f8d218fc8d18122b4503d7756420358f544" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="8.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
</package>
<package pkgid="2f2d767afc9aa3b69484c29c62ec8d119ee712163bc64520e50628e3442288b1" name="libwebp" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="3.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
</package>
<package pkgid="32e8f75d283e49b4cf03c80f2ad4efec2e80e7c8f011415702eada0476eb7c8a" name="libwebp" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.2.1-4" date="1694779200">- fix CVE-2023-4863</changelog>
</package>
<package pkgid="e2c75443086bbfb0d3fe4e30265e216537457c6c63497ae9d4b34695a876e931" name="libwebp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="3.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
</package>
<package pkgid="3f6fcc829498b213ca861651f415d2f6a82f83af3ec944aa603a58d2eee94675" name="libwebp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.2.1-4" date="1694779200">- fix CVE-2023-4863</changelog>
</package>
<package pkgid="1296cca2baa9ffc897d0adcdf5826aa831abf413c05d07d5ad6f9d291bef0ec7" name="libwebp-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="3.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
</package>
<package pkgid="d06c68b83bec586a357b9e57a3936a7b23fb0af5521d5582e382342a6624e205" name="libwebp-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.2.1-4" date="1694779200">- fix CVE-2023-4863</changelog>
</package>
<package pkgid="da83742c85cdc2fb8ace032b55e487ef3a792851b72dd0dc789c792ee8a100ab" name="libwebp-devel" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="3.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
</package>
<package pkgid="7a82f543d79cf3802645df77904d1e6256ec82c234d590ba41be7c0430534d29" name="libwebp-devel" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.2.1-4" date="1694779200">- fix CVE-2023-4863</changelog>
</package>
<package pkgid="2a6be1fa829d00515314b112ce1d1adeab3c7b5405c697da2c445efd23e76f55" name="libwebp-help" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="3.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
</package>
<package pkgid="26cf92564703d936c870be2bc602a0a82fb717064c9b15d8e6c3a6cd8d90eec9" name="libwebp-help" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.2.1-4" date="1694779200">- fix CVE-2023-4863</changelog>
</package>
<package pkgid="81800bca9f284516c350325d6b640ec2eeb8151135edf709c22d1b28db5f1055" name="libwebp-java" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="3.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
</package>
<package pkgid="7132acdc6a52acbc63e5c966131a8f6d08a7c68b1370595c2039679c82bbee25" name="libwebp-java" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.2.1-4" date="1694779200">- fix CVE-2023-4863</changelog>
</package>
<package pkgid="0182cf7bc6b5c6fd777dcc3ac11d519722ef1207d688633abc95a5ab36824649" name="libwebp-tools" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="3.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
</package>
<package pkgid="38bb367261d801bbd664340b68e69d41768234c559f0c08979d6af9943b1c8a4" name="libwebp-tools" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.2.1-4" date="1694779200">- fix CVE-2023-4863</changelog>
</package>
<package pkgid="0329d263c5a8e4ec55f1423db713604530c7ed16c3c1272ca003662e1d627efd" name="libwinpr" arch="x86_64">
  <version epoch="2" ver="2.11.1" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2:2.4.1-1" date="1635854400">- Upgrade freerdp to 2.4.1 for fix CVE-2021-41159, CVE-2021-41160</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 2:2.4.1-2" date="1636372800">- Add ldconfig config file to fix freerdp-proxy dynamic library dependency</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
</package>
<package pkgid="fb1fa4ae28ca87d4e53b424d8b37db626122f7f41d7d3b43e6e31621480ba730" name="libwinpr" arch="x86_64">
  <version epoch="2" ver="2.11.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
</package>
<package pkgid="863ab2cbe27e9d98c6cd98a32848acca88df3232aebe45b6c0696d188c2b9908" name="libwinpr" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
</package>
<package pkgid="8ce584cc45ef0163d95f5561b76fdd30d7d543ad58eeabda22b84c58a856b538" name="libwinpr" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-2" date="1714996800">- Fix CVE-2024-32661</changelog>
</package>
<package pkgid="94c5ef6d0eea6685e4f896cc39578ec0b67b1fa0b03da0ec6f1ff4c69f2e3503" name="libwinpr-devel" arch="x86_64">
  <version epoch="2" ver="2.11.1" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2:2.4.1-1" date="1635854400">- Upgrade freerdp to 2.4.1 for fix CVE-2021-41159, CVE-2021-41160</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 2:2.4.1-2" date="1636372800">- Add ldconfig config file to fix freerdp-proxy dynamic library dependency</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
</package>
<package pkgid="efc500334d2b2668db81f58bde5f112c446e20817419981a29bdaeeb58d93df4" name="libwinpr-devel" arch="x86_64">
  <version epoch="2" ver="2.11.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
</package>
<package pkgid="d954e4016c2966e5b37c606047dff91c849d48622c265e33d609781300ae9b0d" name="libwinpr-devel" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
</package>
<package pkgid="e19c478929b76209ae539a7128fd4544d582e32b035ddc1495f17bcc6e40b80a" name="libwinpr-devel" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-2" date="1714996800">- Fix CVE-2024-32661</changelog>
</package>
<package pkgid="1ab3d8b707750ad74611058c9b516ecbea5f939ffc7ac51f8f481d4e5fbfc013" name="libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="10.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-10" date="1708257600">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
</package>
<package pkgid="80fe686a9eb6f0d70b33849aeee6d23c469b36ddee38230dce322d6401a6bdd5" name="libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="13.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-10" date="1708257600">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-11" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.14-12" date="1715860800">- Type:CVE
- CVE:CVE-2024-34459
- SUG:NA
- DESC:fix CVE-2024-34459</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-13" date="1716033600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
</package>
<package pkgid="c3fa6a7969d03d5068ecd053ddafed8ac5f14df161925b681cbbbf964daf6f63" name="libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-4" date="1644667200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-5" date="1646827200">- Type:CVE
- ID:CVE-2022-23308
- SUG:NA
- DESC:fix CVE-2022-23308</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-6" date="1652097600">- Type:CVE
- ID:CVE-2022-29824
- SUG:NA
- DESC:fix CVE-2022-29824</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-7" date="1655380800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks for xmlACatalogAdd</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-8" date="1656072000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
</package>
<package pkgid="2900e4014a70fedd9b79db2e411f208f13b7c2613ca9d4f1ee0d507c3acb675d" name="libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-8" date="1656072000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
</package>
<package pkgid="4a80ceadd50e2033672ee0a8b132269b7b9d33de8d809367844de0f579b954b6" name="libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="10.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-10" date="1708257600">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
</package>
<package pkgid="752a845f70ad715f8c6fbbe0e2b8d93539143b12628af822795d01da8683272f" name="libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="13.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-10" date="1708257600">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-11" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.14-12" date="1715860800">- Type:CVE
- CVE:CVE-2024-34459
- SUG:NA
- DESC:fix CVE-2024-34459</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-13" date="1716033600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
</package>
<package pkgid="592b05139d5b59e7827e2157b0745c95d4afb7781cbc7862af3c8e0890b9b995" name="libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-4" date="1644667200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-5" date="1646827200">- Type:CVE
- ID:CVE-2022-23308
- SUG:NA
- DESC:fix CVE-2022-23308</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-6" date="1652097600">- Type:CVE
- ID:CVE-2022-29824
- SUG:NA
- DESC:fix CVE-2022-29824</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-7" date="1655380800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks for xmlACatalogAdd</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-8" date="1656072000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
</package>
<package pkgid="9fb1bd9f118ae00c901f5bf3ce207be118a1c17beb9f3a97f182b2fae980b96c" name="libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-8" date="1656072000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
</package>
<package pkgid="0ec16a941408624d55465af9e4a308f87aa44556da622980231ed15d54c38955" name="libxml2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="10.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-10" date="1708257600">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
</package>
<package pkgid="90c416922f7d698f1247f5d863f798216875034737d09240c6815efe3cdec5dc" name="libxml2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="13.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-10" date="1708257600">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-11" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.14-12" date="1715860800">- Type:CVE
- CVE:CVE-2024-34459
- SUG:NA
- DESC:fix CVE-2024-34459</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-13" date="1716033600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
</package>
<package pkgid="d1c2b75b87ff61ec777a11dfbe97cd7f99b9fb525033e6f74fffbdfbe85a71c2" name="libxml2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-4" date="1644667200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-5" date="1646827200">- Type:CVE
- ID:CVE-2022-23308
- SUG:NA
- DESC:fix CVE-2022-23308</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-6" date="1652097600">- Type:CVE
- ID:CVE-2022-29824
- SUG:NA
- DESC:fix CVE-2022-29824</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-7" date="1655380800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks for xmlACatalogAdd</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-8" date="1656072000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
</package>
<package pkgid="af48e6e1a548fd77c1e1a26dd376e0c37e55245b63ed615823b85d9d8e39e5a1" name="libxml2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-8" date="1656072000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
</package>
<package pkgid="263555ee2484e55ed85573bb1feed0de247f075d1cc729056a80d8bf9f31237c" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="10.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-10" date="1708257600">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
</package>
<package pkgid="92a02493fc91c708e13355c7957a6a851a593b783c70ca4e1154bbcf36c86373" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="13.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-10" date="1708257600">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-11" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.14-12" date="1715860800">- Type:CVE
- CVE:CVE-2024-34459
- SUG:NA
- DESC:fix CVE-2024-34459</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-13" date="1716033600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
</package>
<package pkgid="3be9368f4d285efd9eee0b0fccd031ad349b5a00eb3672e7dc3e7be9bbe51b51" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-4" date="1644667200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-5" date="1646827200">- Type:CVE
- ID:CVE-2022-23308
- SUG:NA
- DESC:fix CVE-2022-23308</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-6" date="1652097600">- Type:CVE
- ID:CVE-2022-29824
- SUG:NA
- DESC:fix CVE-2022-29824</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-7" date="1655380800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks for xmlACatalogAdd</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-8" date="1656072000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
</package>
<package pkgid="39252a83b96b3d6c6130d9b25354ad86fa2851ef236025eaf15ee1052a94e2bb" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-8" date="1656072000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
</package>
<package pkgid="f1b02d891f96a79cd618dde3e5fb34589f8275208ac25628a0b0534f62ab841d" name="libxml2-help" arch="noarch">
  <version epoch="0" ver="2.9.14" rel="10.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-10" date="1708257600">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
</package>
<package pkgid="4f70ca5ae12ea3f21868bf262c1125d72001d2adf988a786209195bc3dfc8eba" name="libxml2-help" arch="noarch">
  <version epoch="0" ver="2.9.14" rel="13.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-10" date="1708257600">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-11" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.14-12" date="1715860800">- Type:CVE
- CVE:CVE-2024-34459
- SUG:NA
- DESC:fix CVE-2024-34459</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-13" date="1716033600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
</package>
<package pkgid="854aaac40800b2246f0df8eb2d90593593dcbeec517bf4b9699967e11e277832" name="libxml2-help" arch="noarch">
  <version epoch="0" ver="2.9.14" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-4" date="1644667200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-5" date="1646827200">- Type:CVE
- ID:CVE-2022-23308
- SUG:NA
- DESC:fix CVE-2022-23308</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-6" date="1652097600">- Type:CVE
- ID:CVE-2022-29824
- SUG:NA
- DESC:fix CVE-2022-29824</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-7" date="1655380800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks for xmlACatalogAdd</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-8" date="1656072000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
</package>
<package pkgid="ee05130bb4512a0bb9b568120c4df91e47c60c3bd422e0f921f1fe6cc7854219" name="libxml2-help" arch="noarch">
  <version epoch="0" ver="2.9.14" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-8" date="1656072000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
</package>
<package pkgid="976ad8c065ca727c08e72ab26a85a19695b44369653884e1bbf97e6d0df3e2c9" name="linux-sgx-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="749cacdd69ebbce667b4e1888922004115130731a7baf9a63d71afb65640ed9e" name="linux-sgx-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="fe2964235936924439de283c2230ed325b349389f0dc5ad26f8e906294cd60c2" name="linux-sgx-debugsource" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="928647217f22a6221ef25d3145e995aacf6a3e1b9cac6b6deb42928ff29ac18b" name="linux-sgx-debugsource" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="ca8742fd826b8f02acdce749f95f1099b4c51229344379bf9589207acc8fc748" name="linux-sgx-driver" arch="x86_64">
  <version epoch="0" ver="2.14" rel="2.oe2203sp1"/>
  <changelog author="chenmaodong &lt;chenmaodong@huawei.com&gt; - 2.11.3" date="1609156800">- Fix compilation on 5.8 kernel</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 2.11.4" date="1625140800">- add buildrequires uname-build-checks</changelog>
  <changelog author="chenmaodong &lt;chenmaodong@huawei.com&gt; - 2.11.5" date="1626696000">- set the requiers of kernel version with linux-sgx-driver building environment kernel</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 2.14-1" date="1667476800">- update to 2.14</changelog>
</package>
<package pkgid="c1826bd4c20429c4ae029257c67cdd532a02b58900b5e62b101b90ace7e39df4" name="linux-sgx-driver-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.14" rel="2.oe2203sp1"/>
  <changelog author="chenmaodong &lt;chenmaodong@huawei.com&gt; - 2.11.3" date="1609156800">- Fix compilation on 5.8 kernel</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 2.11.4" date="1625140800">- add buildrequires uname-build-checks</changelog>
  <changelog author="chenmaodong &lt;chenmaodong@huawei.com&gt; - 2.11.5" date="1626696000">- set the requiers of kernel version with linux-sgx-driver building environment kernel</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 2.14-1" date="1667476800">- update to 2.14</changelog>
</package>
<package pkgid="27729d20dddc189d96be57ca622cda9e9f7e98679f0cf61f10096979e1b7d673" name="linux-sgx-driver-debugsource" arch="x86_64">
  <version epoch="0" ver="2.14" rel="2.oe2203sp1"/>
  <changelog author="chenmaodong &lt;chenmaodong@huawei.com&gt; - 2.11.3" date="1609156800">- Fix compilation on 5.8 kernel</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 2.11.4" date="1625140800">- add buildrequires uname-build-checks</changelog>
  <changelog author="chenmaodong &lt;chenmaodong@huawei.com&gt; - 2.11.5" date="1626696000">- set the requiers of kernel version with linux-sgx-driver building environment kernel</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 2.14-1" date="1667476800">- update to 2.14</changelog>
</package>
<package pkgid="a571cb7dc6a96ea2c50f012bef8b5c5208102aad592295558ff23b27bae80138" name="linuxptp" arch="x86_64">
  <version epoch="0" ver="2.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0-6" date="1706616000">- Remove bogus command line option</changelog>
</package>
<package pkgid="0565ae3b36352417415f3670431ec1b1d6e2c97f00da5f2b181f9043eabebbef" name="linuxptp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0-6" date="1706616000">- Remove bogus command line option</changelog>
</package>
<package pkgid="b391c76aa67b88730a71828849a24752f3d667ed214d683ea7fa004c75e39965" name="linuxptp-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0-6" date="1706616000">- Remove bogus command line option</changelog>
</package>
<package pkgid="3d4b4b8f56f64df4a41823523c1433200bfa6f946e6c92b4327fc84647a4b3c2" name="linuxptp-help" arch="noarch">
  <version epoch="0" ver="2.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0-6" date="1706616000">- Remove bogus command line option</changelog>
</package>
<package pkgid="b7dc2cc8e826e31a5dde33b51b5fdcbe1f6bb23f80f5a054a887b462c09cf28c" name="llvm" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="6.oe2203sp1"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 12.0.1-3" date="1667304000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Disabe DLLVM_BUILD_TEST</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 12.0.1-4" date="1671624000">- Type: Compile Option
- ID: NA
- SUG: NA
- DESC: Add -fPIE and -pie options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 12.0.1-5" date="1693396800">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Add loongarch support</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.0.1-6" date="1709985600">- Type: Requires
- ID: NA
- SUG: NA
- DESC: add llvm and llvm-devel requires pkg llvm-libs</changelog>
</package>
<package pkgid="bfe9ae9414a1255405637911d47f7bf82dfe01c325849eed05bfc98c2fcef739" name="llvm" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="7.oe2203sp1"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 12.0.1-3" date="1667304000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Disabe DLLVM_BUILD_TEST</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 12.0.1-4" date="1671624000">- Type: Compile Option
- ID: NA
- SUG: NA
- DESC: Add -fPIE and -pie options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 12.0.1-5" date="1693396800">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Add loongarch support</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.0.1-6" date="1709985600">- Type: Requires
- ID: NA
- SUG: NA
- DESC: add llvm and llvm-devel requires pkg llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 12.0.1-7" date="1712664000">- Type: CVE
- ID: NA
- SUG: NA
- Backport patch to fix CVE-2023-46049</changelog>
</package>
<package pkgid="b2b5305ced7726ec7fd8314128e9388e8d4275a5ea361aa478746dc6fce90874" name="llvm-bolt" arch="x86_64">
  <version epoch="0" ver="15.0.7" rel="1.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt;" date="1638187200">- Type:Init
- ID:NA
- SUG:NA
- DESC:Init llvm-bolt repository</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; 0-1.20211016.gitb72f753" date="1671451200">- Type:fix
- ID:NA
- SUG:NA
- DESC: Add debuginfo package and delete rpath in binary</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 0-2.20211016.gitb72f753" date="1686830400">- Type:backport
- ID:NA
- SUG:NA
- DESC: Handle data at the beginning of a function when disassembling and building CFG.</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huaiwei.com&gt; 15.0.7-1" date="1693483200">- Type:Update
- ID:NA
- SUG:NA
- DESC: Update llvm-bolt from llvm-bolt to llvm-bolt-15</changelog>
</package>
<package pkgid="40a274ccd9ad19c19210890697a438593d170104c6afc6788df04c857e865315" name="llvm-bolt" arch="x86_64">
  <version epoch="0" ver="15.0.7" rel="2.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt;" date="1638187200">- Type:Init
- ID:NA
- SUG:NA
- DESC:Init llvm-bolt repository</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; 0-1.20211016.gitb72f753" date="1671451200">- Type:fix
- ID:NA
- SUG:NA
- DESC: Add debuginfo package and delete rpath in binary</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 0-2.20211016.gitb72f753" date="1686830400">- Type:backport
- ID:NA
- SUG:NA
- DESC: Handle data at the beginning of a function when disassembling and building CFG.</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huaiwei.com&gt; 15.0.7-1" date="1693483200">- Type:Update
- ID:NA
- SUG:NA
- DESC: Update llvm-bolt from llvm-bolt to llvm-bolt-15</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 15.0.7-2" date="1694088000">- Type:Update
- ID:NA
- SUG:NA
- DESC: Backport bugfix and add AArch64 support for hugify and inline.</changelog>
</package>
<package pkgid="f4ac68f53e0f20aa855eb742d781138ee6eb5ee130563fc4f0937183c16058db" name="llvm-bolt-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.0.7" rel="1.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt;" date="1638187200">- Type:Init
- ID:NA
- SUG:NA
- DESC:Init llvm-bolt repository</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; 0-1.20211016.gitb72f753" date="1671451200">- Type:fix
- ID:NA
- SUG:NA
- DESC: Add debuginfo package and delete rpath in binary</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 0-2.20211016.gitb72f753" date="1686830400">- Type:backport
- ID:NA
- SUG:NA
- DESC: Handle data at the beginning of a function when disassembling and building CFG.</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huaiwei.com&gt; 15.0.7-1" date="1693483200">- Type:Update
- ID:NA
- SUG:NA
- DESC: Update llvm-bolt from llvm-bolt to llvm-bolt-15</changelog>
</package>
<package pkgid="04391ba17dfb4bb677a314ef0d96c5459ce4e0440ffb7af379de5fc67f37d050" name="llvm-bolt-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.0.7" rel="2.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt;" date="1638187200">- Type:Init
- ID:NA
- SUG:NA
- DESC:Init llvm-bolt repository</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; 0-1.20211016.gitb72f753" date="1671451200">- Type:fix
- ID:NA
- SUG:NA
- DESC: Add debuginfo package and delete rpath in binary</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 0-2.20211016.gitb72f753" date="1686830400">- Type:backport
- ID:NA
- SUG:NA
- DESC: Handle data at the beginning of a function when disassembling and building CFG.</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huaiwei.com&gt; 15.0.7-1" date="1693483200">- Type:Update
- ID:NA
- SUG:NA
- DESC: Update llvm-bolt from llvm-bolt to llvm-bolt-15</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 15.0.7-2" date="1694088000">- Type:Update
- ID:NA
- SUG:NA
- DESC: Backport bugfix and add AArch64 support for hugify and inline.</changelog>
</package>
<package pkgid="2b0cd6dd52ed93c743356e990d8e856928e6021a3cbf8aae8e1b38abfa4692b5" name="llvm-bolt-debugsource" arch="x86_64">
  <version epoch="0" ver="15.0.7" rel="1.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt;" date="1638187200">- Type:Init
- ID:NA
- SUG:NA
- DESC:Init llvm-bolt repository</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; 0-1.20211016.gitb72f753" date="1671451200">- Type:fix
- ID:NA
- SUG:NA
- DESC: Add debuginfo package and delete rpath in binary</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 0-2.20211016.gitb72f753" date="1686830400">- Type:backport
- ID:NA
- SUG:NA
- DESC: Handle data at the beginning of a function when disassembling and building CFG.</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huaiwei.com&gt; 15.0.7-1" date="1693483200">- Type:Update
- ID:NA
- SUG:NA
- DESC: Update llvm-bolt from llvm-bolt to llvm-bolt-15</changelog>
</package>
<package pkgid="493f26fd5e0ad1d3f42768804bf603a2f2bfe3071d8a56462a169156f9b3f061" name="llvm-bolt-debugsource" arch="x86_64">
  <version epoch="0" ver="15.0.7" rel="2.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt;" date="1638187200">- Type:Init
- ID:NA
- SUG:NA
- DESC:Init llvm-bolt repository</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; 0-1.20211016.gitb72f753" date="1671451200">- Type:fix
- ID:NA
- SUG:NA
- DESC: Add debuginfo package and delete rpath in binary</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 0-2.20211016.gitb72f753" date="1686830400">- Type:backport
- ID:NA
- SUG:NA
- DESC: Handle data at the beginning of a function when disassembling and building CFG.</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huaiwei.com&gt; 15.0.7-1" date="1693483200">- Type:Update
- ID:NA
- SUG:NA
- DESC: Update llvm-bolt from llvm-bolt to llvm-bolt-15</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 15.0.7-2" date="1694088000">- Type:Update
- ID:NA
- SUG:NA
- DESC: Backport bugfix and add AArch64 support for hugify and inline.</changelog>
</package>
<package pkgid="9c52ec1ab3e04cfb1d19a68a91ec1a679c333e8188e76e085f84a3d11efe1431" name="llvm-bolt-doc" arch="noarch">
  <version epoch="0" ver="15.0.7" rel="1.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt;" date="1638187200">- Type:Init
- ID:NA
- SUG:NA
- DESC:Init llvm-bolt repository</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; 0-1.20211016.gitb72f753" date="1671451200">- Type:fix
- ID:NA
- SUG:NA
- DESC: Add debuginfo package and delete rpath in binary</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 0-2.20211016.gitb72f753" date="1686830400">- Type:backport
- ID:NA
- SUG:NA
- DESC: Handle data at the beginning of a function when disassembling and building CFG.</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huaiwei.com&gt; 15.0.7-1" date="1693483200">- Type:Update
- ID:NA
- SUG:NA
- DESC: Update llvm-bolt from llvm-bolt to llvm-bolt-15</changelog>
</package>
<package pkgid="60f7af259ffda53d1d5004fab26f4dd77749fbef7879d1ae2b235a69de111ac4" name="llvm-bolt-doc" arch="noarch">
  <version epoch="0" ver="15.0.7" rel="2.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt;" date="1638187200">- Type:Init
- ID:NA
- SUG:NA
- DESC:Init llvm-bolt repository</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; 0-1.20211016.gitb72f753" date="1671451200">- Type:fix
- ID:NA
- SUG:NA
- DESC: Add debuginfo package and delete rpath in binary</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 0-2.20211016.gitb72f753" date="1686830400">- Type:backport
- ID:NA
- SUG:NA
- DESC: Handle data at the beginning of a function when disassembling and building CFG.</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huaiwei.com&gt; 15.0.7-1" date="1693483200">- Type:Update
- ID:NA
- SUG:NA
- DESC: Update llvm-bolt from llvm-bolt to llvm-bolt-15</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 15.0.7-2" date="1694088000">- Type:Update
- ID:NA
- SUG:NA
- DESC: Backport bugfix and add AArch64 support for hugify and inline.</changelog>
</package>
<package pkgid="94369e1cc2119ba15189419b1a9f9fa4c0166a549606e7cd32191fec7432a974" name="llvm-debuginfo" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="6.oe2203sp1"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 12.0.1-3" date="1667304000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Disabe DLLVM_BUILD_TEST</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 12.0.1-4" date="1671624000">- Type: Compile Option
- ID: NA
- SUG: NA
- DESC: Add -fPIE and -pie options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 12.0.1-5" date="1693396800">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Add loongarch support</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.0.1-6" date="1709985600">- Type: Requires
- ID: NA
- SUG: NA
- DESC: add llvm and llvm-devel requires pkg llvm-libs</changelog>
</package>
<package pkgid="76b964e6781b94e679296fee57834de6b4e47eb0076a99185ea5d4a86b6fdfc2" name="llvm-debuginfo" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="7.oe2203sp1"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 12.0.1-3" date="1667304000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Disabe DLLVM_BUILD_TEST</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 12.0.1-4" date="1671624000">- Type: Compile Option
- ID: NA
- SUG: NA
- DESC: Add -fPIE and -pie options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 12.0.1-5" date="1693396800">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Add loongarch support</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.0.1-6" date="1709985600">- Type: Requires
- ID: NA
- SUG: NA
- DESC: add llvm and llvm-devel requires pkg llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 12.0.1-7" date="1712664000">- Type: CVE
- ID: NA
- SUG: NA
- Backport patch to fix CVE-2023-46049</changelog>
</package>
<package pkgid="431c0fc4d4acfbf12406ca274bee889c92aaffe966c4f5528c88199019a20fe5" name="llvm-debugsource" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="6.oe2203sp1"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 12.0.1-3" date="1667304000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Disabe DLLVM_BUILD_TEST</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 12.0.1-4" date="1671624000">- Type: Compile Option
- ID: NA
- SUG: NA
- DESC: Add -fPIE and -pie options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 12.0.1-5" date="1693396800">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Add loongarch support</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.0.1-6" date="1709985600">- Type: Requires
- ID: NA
- SUG: NA
- DESC: add llvm and llvm-devel requires pkg llvm-libs</changelog>
</package>
<package pkgid="aae254f11667202a75d152646c6cde02a49a0231889e1f4562a200752a205e75" name="llvm-debugsource" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="7.oe2203sp1"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 12.0.1-3" date="1667304000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Disabe DLLVM_BUILD_TEST</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 12.0.1-4" date="1671624000">- Type: Compile Option
- ID: NA
- SUG: NA
- DESC: Add -fPIE and -pie options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 12.0.1-5" date="1693396800">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Add loongarch support</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.0.1-6" date="1709985600">- Type: Requires
- ID: NA
- SUG: NA
- DESC: add llvm and llvm-devel requires pkg llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 12.0.1-7" date="1712664000">- Type: CVE
- ID: NA
- SUG: NA
- Backport patch to fix CVE-2023-46049</changelog>
</package>
<package pkgid="ee792058979c958edaa2cb5753ec2ac55b1818845b5acc213aa9065067752097" name="llvm-devel" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="6.oe2203sp1"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 12.0.1-3" date="1667304000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Disabe DLLVM_BUILD_TEST</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 12.0.1-4" date="1671624000">- Type: Compile Option
- ID: NA
- SUG: NA
- DESC: Add -fPIE and -pie options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 12.0.1-5" date="1693396800">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Add loongarch support</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.0.1-6" date="1709985600">- Type: Requires
- ID: NA
- SUG: NA
- DESC: add llvm and llvm-devel requires pkg llvm-libs</changelog>
</package>
<package pkgid="c7b98a546df1c2190431826be301df83e5346b2ab64439a99534ea59567d143a" name="llvm-devel" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="7.oe2203sp1"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 12.0.1-3" date="1667304000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Disabe DLLVM_BUILD_TEST</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 12.0.1-4" date="1671624000">- Type: Compile Option
- ID: NA
- SUG: NA
- DESC: Add -fPIE and -pie options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 12.0.1-5" date="1693396800">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Add loongarch support</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.0.1-6" date="1709985600">- Type: Requires
- ID: NA
- SUG: NA
- DESC: add llvm and llvm-devel requires pkg llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 12.0.1-7" date="1712664000">- Type: CVE
- ID: NA
- SUG: NA
- Backport patch to fix CVE-2023-46049</changelog>
</package>
<package pkgid="f5593ae27ab52f0c7bc1626bb62bd6356e13f77ca3023e7408a8cc4cbbc88a50" name="llvm-help" arch="noarch">
  <version epoch="0" ver="12.0.1" rel="6.oe2203sp1"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 12.0.1-3" date="1667304000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Disabe DLLVM_BUILD_TEST</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 12.0.1-4" date="1671624000">- Type: Compile Option
- ID: NA
- SUG: NA
- DESC: Add -fPIE and -pie options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 12.0.1-5" date="1693396800">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Add loongarch support</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.0.1-6" date="1709985600">- Type: Requires
- ID: NA
- SUG: NA
- DESC: add llvm and llvm-devel requires pkg llvm-libs</changelog>
</package>
<package pkgid="9e6894dfcba5a185d530a80becb8102346375f66d7ddd2d4b5e56935f2dadce8" name="llvm-help" arch="noarch">
  <version epoch="0" ver="12.0.1" rel="7.oe2203sp1"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 12.0.1-3" date="1667304000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Disabe DLLVM_BUILD_TEST</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 12.0.1-4" date="1671624000">- Type: Compile Option
- ID: NA
- SUG: NA
- DESC: Add -fPIE and -pie options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 12.0.1-5" date="1693396800">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Add loongarch support</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.0.1-6" date="1709985600">- Type: Requires
- ID: NA
- SUG: NA
- DESC: add llvm and llvm-devel requires pkg llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 12.0.1-7" date="1712664000">- Type: CVE
- ID: NA
- SUG: NA
- Backport patch to fix CVE-2023-46049</changelog>
</package>
<package pkgid="ab5d44fbbfac4a78357741fcf0978f23d5d598268c6b382dfe73a3a3b0caa5b1" name="llvm-libs" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="6.oe2203sp1"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 12.0.1-3" date="1667304000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Disabe DLLVM_BUILD_TEST</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 12.0.1-4" date="1671624000">- Type: Compile Option
- ID: NA
- SUG: NA
- DESC: Add -fPIE and -pie options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 12.0.1-5" date="1693396800">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Add loongarch support</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.0.1-6" date="1709985600">- Type: Requires
- ID: NA
- SUG: NA
- DESC: add llvm and llvm-devel requires pkg llvm-libs</changelog>
</package>
<package pkgid="edf228785cf52ce2ee2e160f6f424166af08ac9da2cc3ad1b6c1bd2a01aaebf6" name="llvm-libs" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="7.oe2203sp1"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 12.0.1-3" date="1667304000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Disabe DLLVM_BUILD_TEST</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 12.0.1-4" date="1671624000">- Type: Compile Option
- ID: NA
- SUG: NA
- DESC: Add -fPIE and -pie options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 12.0.1-5" date="1693396800">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Add loongarch support</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.0.1-6" date="1709985600">- Type: Requires
- ID: NA
- SUG: NA
- DESC: add llvm and llvm-devel requires pkg llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 12.0.1-7" date="1712664000">- Type: CVE
- ID: NA
- SUG: NA
- Backport patch to fix CVE-2023-46049</changelog>
</package>
<package pkgid="d9c86c1a7000953e1690a79465904a622f47e04d3baafafe2f829ba876fcff54" name="logback" arch="noarch">
  <version epoch="0" ver="1.2.8" rel="3.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 1.2.8-1" date="1640606400">- Upgrade to 1.2.8
- Fix CVE-2021-42550</changelog>
  <changelog author="Chenyx &lt;chenyixiong3@huawei.com&gt; - 1.2.8-2" date="1659960000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.2.8-3" date="1702382400">- Fix CVE-2023-6378,CVE-2023-6481</changelog>
</package>
<package pkgid="4a4b10c67b1ebb7293c6c63b3a90bf523c4d472f7478ae9b82398f60353bcd5f" name="logback-access" arch="noarch">
  <version epoch="0" ver="1.2.8" rel="3.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 1.2.8-1" date="1640606400">- Upgrade to 1.2.8
- Fix CVE-2021-42550</changelog>
  <changelog author="Chenyx &lt;chenyixiong3@huawei.com&gt; - 1.2.8-2" date="1659960000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.2.8-3" date="1702382400">- Fix CVE-2023-6378,CVE-2023-6481</changelog>
</package>
<package pkgid="7176a19d4ffe0b5d748ab7983da402b347cbe397a00cef1f49ff15491713a96f" name="logback-examples" arch="noarch">
  <version epoch="0" ver="1.2.8" rel="3.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 1.2.8-1" date="1640606400">- Upgrade to 1.2.8
- Fix CVE-2021-42550</changelog>
  <changelog author="Chenyx &lt;chenyixiong3@huawei.com&gt; - 1.2.8-2" date="1659960000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.2.8-3" date="1702382400">- Fix CVE-2023-6378,CVE-2023-6481</changelog>
</package>
<package pkgid="e324a350dca7c19c12e4e4690d226c42dfbb72c432116589946ac4838ef74c30" name="logback-help" arch="noarch">
  <version epoch="0" ver="1.2.8" rel="3.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 1.2.8-1" date="1640606400">- Upgrade to 1.2.8
- Fix CVE-2021-42550</changelog>
  <changelog author="Chenyx &lt;chenyixiong3@huawei.com&gt; - 1.2.8-2" date="1659960000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.2.8-3" date="1702382400">- Fix CVE-2023-6378,CVE-2023-6481</changelog>
</package>
<package pkgid="6f1ab6a640573fc0ea3bce00ccda61602aebae5a74ff4465967c9385490249fd" name="lua" arch="x86_64">
  <version epoch="0" ver="5.4.3" rel="11.oe2203sp1"/>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 5.4.3-2" date="1640865600">- add liblua-5.3.so file</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 5.4.3-3" date="1642075200">- delete liblua-5.3.so file</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-4" date="1648814400">- fix CVE-2021-43519</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-5" date="1649937600">- fix CVE-2021-43519 patch error</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-6" date="1650024000">- fix CVE-2021-44647 CVE-2022-28805</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 5.4.3-7" date="1658145600">- fix CVE-2022-33099</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-8" date="1660910400">- fix CVE-2021-44964</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 5.4.3-9" date="1663761600">- bugfix with upstream patch</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 5.4.3-10" date="1672056000">- add support for LoongArch</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 5.4.3-11" date="1681819200">- fix CVE-2021-45985 and other commits because CVE change heavily rely on these commits</changelog>
</package>
<package pkgid="18e143d0552cf99e10394a7d49d572bba2ca67fe20f5c9a4a369a8db397fe692" name="lua-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.4.3" rel="11.oe2203sp1"/>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 5.4.3-2" date="1640865600">- add liblua-5.3.so file</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 5.4.3-3" date="1642075200">- delete liblua-5.3.so file</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-4" date="1648814400">- fix CVE-2021-43519</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-5" date="1649937600">- fix CVE-2021-43519 patch error</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-6" date="1650024000">- fix CVE-2021-44647 CVE-2022-28805</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 5.4.3-7" date="1658145600">- fix CVE-2022-33099</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-8" date="1660910400">- fix CVE-2021-44964</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 5.4.3-9" date="1663761600">- bugfix with upstream patch</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 5.4.3-10" date="1672056000">- add support for LoongArch</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 5.4.3-11" date="1681819200">- fix CVE-2021-45985 and other commits because CVE change heavily rely on these commits</changelog>
</package>
<package pkgid="61da04b26415d293e509bff20e0514a8a2507519de41cb4736933a58709f932d" name="lua-debugsource" arch="x86_64">
  <version epoch="0" ver="5.4.3" rel="11.oe2203sp1"/>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 5.4.3-2" date="1640865600">- add liblua-5.3.so file</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 5.4.3-3" date="1642075200">- delete liblua-5.3.so file</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-4" date="1648814400">- fix CVE-2021-43519</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-5" date="1649937600">- fix CVE-2021-43519 patch error</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-6" date="1650024000">- fix CVE-2021-44647 CVE-2022-28805</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 5.4.3-7" date="1658145600">- fix CVE-2022-33099</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-8" date="1660910400">- fix CVE-2021-44964</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 5.4.3-9" date="1663761600">- bugfix with upstream patch</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 5.4.3-10" date="1672056000">- add support for LoongArch</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 5.4.3-11" date="1681819200">- fix CVE-2021-45985 and other commits because CVE change heavily rely on these commits</changelog>
</package>
<package pkgid="8f554958cb6409bb489506d2421779c5615c43a70d65610b7c70294a16b602fe" name="lua-devel" arch="x86_64">
  <version epoch="0" ver="5.4.3" rel="11.oe2203sp1"/>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 5.4.3-2" date="1640865600">- add liblua-5.3.so file</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 5.4.3-3" date="1642075200">- delete liblua-5.3.so file</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-4" date="1648814400">- fix CVE-2021-43519</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-5" date="1649937600">- fix CVE-2021-43519 patch error</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-6" date="1650024000">- fix CVE-2021-44647 CVE-2022-28805</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 5.4.3-7" date="1658145600">- fix CVE-2022-33099</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-8" date="1660910400">- fix CVE-2021-44964</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 5.4.3-9" date="1663761600">- bugfix with upstream patch</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 5.4.3-10" date="1672056000">- add support for LoongArch</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 5.4.3-11" date="1681819200">- fix CVE-2021-45985 and other commits because CVE change heavily rely on these commits</changelog>
</package>
<package pkgid="ee766c4218b3384922a417bf9ed488e578454c3e504245d5e3bc94f4b6cb83fa" name="lua-help" arch="noarch">
  <version epoch="0" ver="5.4.3" rel="11.oe2203sp1"/>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 5.4.3-2" date="1640865600">- add liblua-5.3.so file</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 5.4.3-3" date="1642075200">- delete liblua-5.3.so file</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-4" date="1648814400">- fix CVE-2021-43519</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-5" date="1649937600">- fix CVE-2021-43519 patch error</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-6" date="1650024000">- fix CVE-2021-44647 CVE-2022-28805</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 5.4.3-7" date="1658145600">- fix CVE-2022-33099</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-8" date="1660910400">- fix CVE-2021-44964</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 5.4.3-9" date="1663761600">- bugfix with upstream patch</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 5.4.3-10" date="1672056000">- add support for LoongArch</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 5.4.3-11" date="1681819200">- fix CVE-2021-45985 and other commits because CVE change heavily rely on these commits</changelog>
</package>
<package pkgid="bc26bdb6d75a5646bf93d62f66601906f0b09e0cdcdff938c7aa8e7e71f74923" name="lwip" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="104.oe2203sp1"/>
  <changelog author="wuchangye &lt;wuchangye@huawei.com&gt; - 2.1.3-95" date="1702123200">- fix the coredump issue when UDP traffic is sent</changelog>
  <changelog author="hankangkang &lt;hankangkang5@huawei.com&gt; - 2.1.3-96" date="1702555200">- modfiy-accept-null-pointer-when-new-conn-receive-RST-packet-in-listening</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.1.3-97" date="1702641600">- lwip log: fix reversed port in tcp_input</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.1.3-98" date="1703073600">- event_callback: del errevent log if err is ERR_OK</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.1.3-99" date="1703332800">- tcp_send_fin: add the fin to the last unsent segment</changelog>
  <changelog author="hankangkang &lt;hankangkang5@huawei.com&gt; - 2.1.3-100" date="1703505600">- Mod the issue that 2w connection unable to establish</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-101" date="1703592000">- remove duplicate lwip log</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-102" date="1703592001">- fix rte_ring_create/free time-consuming</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-103" date="1703851200">- rte_ring_get_memsize adapt dpdk 19.11</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-104" date="1704196800">- tcp_in: fix ooseq update error</changelog>
</package>
<package pkgid="bb0fa4794c6231285297c52c91055d04b16b061c3a2a0ea158a51e87b20c9d28" name="lwip" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="39.oe2203sp1"/>
  <changelog author="wuchangsheng&lt;wuchangsheng2@huawei.com&gt; - 2.1.3-30" date="1670932800">- optimite pcb unsent and unacked list
  fast rexmit all pkts</changelog>
  <changelog author="wuchangsheng&lt;wuchangsheng2@huawei.com&gt; - 2.1.3-31" date="1671364800">- expand rcv wnd size and add prefetch</changelog>
  <changelog author="kircher&lt;majun65@huawei.com&gt; - 2.1.3-32" date="1671451200">- skip unnecessary tcp_route</changelog>
  <changelog author="wuchangsheng&lt;wuchangsheng2@huawei.com&gt; - 2.1.3-33" date="1671537600">- add variable in struct sock</changelog>
  <changelog author="kircher&lt;majun65@huawei.com&gt; - 2.1.3-34" date="1671537601">- add dataack when recv too many acks with data</changelog>
  <changelog author="kircher&lt;majun65@huawei.com&gt; - 2.1.3-35" date="1671537602">- fix the dataack is always lower than 256</changelog>
  <changelog author="kircher&lt;majun65@huawei.com&gt; - 2.1.3-36" date="1671624000">- do not update cwnd when send dataack</changelog>
  <changelog author="wuchangsheng&lt;wuchangsheng2@huawei.com&gt; - 2.1.3-37" date="1671624001">- reduce struct pbuf size</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-38" date="1671624002">- move pcb_if to ip_pcb to let listen pcb can use it</changelog>
  <changelog author="wuchangsheng&lt;wuchangsheng2@huawei.com&gt; - 2.1.3-39" date="1672401600">- expand recv mbox size</changelog>
</package>
<package pkgid="3eacca9484c0aa07e49b2baadf04980c152e1f65bb35da476af0449d349daa90" name="lwip" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="51.oe2203sp1"/>
  <changelog author="Lemmy Huang &lt;huangliming5@huawei.com&gt; - 2.1.3-44" date="1678363200">- cleancode: improve lwipopts.h readability</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-45" date="1678449600">- reduce cpu usage when send</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-46" date="1678708800">- use pbuf lock when aggregate pbuf</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-47" date="1678708801">- fix tso small packet drop in kernel server</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-48" date="1678708802">- add same node ring &amp; gazellectl -a</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 2.1.3-49" date="1679486400">- lwip send recv thread bind numa</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-50" date="1680350400">- fix last_unsent/last_unacked error
- fix send failed due to pcb-&gt;nrtx &gt; TCP_MAXRTX</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 2.1.3-51" date="1683892800">- add udp multicast support in lwip</changelog>
</package>
<package pkgid="3bb901be4c46dc015ce2fa488db497a879bca1f98e35f05978084c0cbaf1cee3" name="lwip" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="75.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-66" date="1686052800">- revert cleancode series patches</changelog>
  <changelog author="Lemmy Huang &lt;huangliming5@huawei.com&gt; - 2.1.3-67" date="1686139200">- optimize: avoid too many empty acks in tcp_input</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-68" date="1686744000">- fix udp send/recv in mutiple queue</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-69" date="1686744001">- fix udp recvmbox size not set</changelog>
  <changelog author="Lemmy Huang &lt;huangliming5@huawei.com&gt; - 2.1.3-70" date="1686830400">- adapt to dpdk-19.11 and dpdk-21.11</changelog>
  <changelog author="Lemmy Huang &lt;huangliming5@huawei.com&gt; - 2.1.3-71" date="1686830401">- patch -p1 automaition in lwip.spec</changelog>
  <changelog author="Lemmy Huang &lt;huangliming5@huawei.com&gt; - 2.1.3-72" date="1686830402">- fix null pointer when zero port listen</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 2.1.3-73" date="1687348800">- enable udp cksum in lwip</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-74" date="1687694400">- add error check in hugepage_init and sys_mbox_free</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 2.1.3-75" date="1687867200">- add CHECKSUM_UDP when not support OFFLOAD_UDP_CHECKS</changelog>
</package>
<package pkgid="7e6b86aff96fe64bbbe0d2090aad4b9971784f53ee35fccc01453449b31e3d0b" name="lxc" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="2022102408.oe2203sp1"/>
  <changelog author="Neil.wrz&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022092001" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do mask paths after parent mounted</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022101101" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: skip kill cgroup processes if no hierarchies</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022101701" date="1666008000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update version to 4.0.3-2022101701</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.0.3-2022102401" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102403" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add macro to adapt musl libc</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102404" date="1669982400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add lxc-attach add-gids option</changelog>
  <changelog author="huangsong&lt;huangsong14@huawei.com&gt; - 4.0.3-2022102405" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: change the suffi parameter in lxc attach --help output</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102406" date="1672056000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: rollback strprint code modified</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102407" date="1672833600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add sscanf adapation code for musl</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102408" date="1673611200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix cve CVE-2022-47952 log leaks root information</changelog>
</package>
<package pkgid="88027e14ba11e4eae26072e61d5884d893ddffe1a60b7a44fb67df6968255ba3" name="lxc" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="2022102423.oe2203sp1"/>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.0.3-2022102414" date="1677931200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add loongarch64 support for lxc</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102415" date="1680177600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: use ocihooks env after getenv</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102416" date="1681732800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mixed use of signed and unsigned type</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102417" date="1682078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove unused meminfo stats</changelog>
  <changelog author="Jian Zhang&lt;zhang_jian7@hoperun.com&gt; - 4.0.3-2022102418" date="1683201600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix lost return codes of spawned processe</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102419" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix load bpf failed</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102420" date="1686916800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mount device path incorrect</changelog>
  <changelog author="mzzhou&lt;1362843687@qq.com&gt; - 4.0.3-2022102421" date="1688990400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add secure compile macro</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102422" date="1694001600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: codecheck fix</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102423" date="1694433600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: containers in the FREEZING state also need to be unfreeze</changelog>
</package>
<package pkgid="05131740a20dab3d5f958bae43ef6397e966531f2099ca0f7ff42d8f94a80b64" name="lxc" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="2022102425.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102416" date="1681732800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mixed use of signed and unsigned type</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102417" date="1682078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove unused meminfo stats</changelog>
  <changelog author="Jian Zhang&lt;zhang_jian7@hoperun.com&gt; - 4.0.3-2022102418" date="1683201600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix lost return codes of spawned processe</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102419" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix load bpf failed</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102420" date="1686916800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mount device path incorrect</changelog>
  <changelog author="mzzhou&lt;1362843687@qq.com&gt; - 4.0.3-2022102421" date="1688990400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add secure compile macro</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102422" date="1694001600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: codecheck fix</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102423" date="1694433600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: containers in the FREEZING state also need to be unfreeze</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 4.0.3-2022102424" date="1699358400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: Add succeed message info for ocihook</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 4.0.3-2022102425" date="1702987200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: check cgroup path empty while setting freezer</changelog>
</package>
<package pkgid="8368ee8851c3488a4d99ebdf76b261ef9a64f53dbdff25033c12c7860df8de04" name="lxc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="2022102408.oe2203sp1"/>
  <changelog author="Neil.wrz&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022092001" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do mask paths after parent mounted</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022101101" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: skip kill cgroup processes if no hierarchies</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022101701" date="1666008000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update version to 4.0.3-2022101701</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.0.3-2022102401" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102403" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add macro to adapt musl libc</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102404" date="1669982400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add lxc-attach add-gids option</changelog>
  <changelog author="huangsong&lt;huangsong14@huawei.com&gt; - 4.0.3-2022102405" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: change the suffi parameter in lxc attach --help output</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102406" date="1672056000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: rollback strprint code modified</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102407" date="1672833600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add sscanf adapation code for musl</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102408" date="1673611200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix cve CVE-2022-47952 log leaks root information</changelog>
</package>
<package pkgid="7db73b8b311468f39dc25773bf7966bf24e52470537d27310bcf6cb1b8f1a390" name="lxc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="2022102423.oe2203sp1"/>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.0.3-2022102414" date="1677931200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add loongarch64 support for lxc</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102415" date="1680177600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: use ocihooks env after getenv</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102416" date="1681732800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mixed use of signed and unsigned type</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102417" date="1682078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove unused meminfo stats</changelog>
  <changelog author="Jian Zhang&lt;zhang_jian7@hoperun.com&gt; - 4.0.3-2022102418" date="1683201600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix lost return codes of spawned processe</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102419" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix load bpf failed</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102420" date="1686916800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mount device path incorrect</changelog>
  <changelog author="mzzhou&lt;1362843687@qq.com&gt; - 4.0.3-2022102421" date="1688990400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add secure compile macro</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102422" date="1694001600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: codecheck fix</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102423" date="1694433600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: containers in the FREEZING state also need to be unfreeze</changelog>
</package>
<package pkgid="f031ec6a6f9bcf7b7d9ef862868fc82dc87156bc5e1867359e2d3bc066b52c12" name="lxc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="2022102425.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102416" date="1681732800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mixed use of signed and unsigned type</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102417" date="1682078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove unused meminfo stats</changelog>
  <changelog author="Jian Zhang&lt;zhang_jian7@hoperun.com&gt; - 4.0.3-2022102418" date="1683201600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix lost return codes of spawned processe</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102419" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix load bpf failed</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102420" date="1686916800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mount device path incorrect</changelog>
  <changelog author="mzzhou&lt;1362843687@qq.com&gt; - 4.0.3-2022102421" date="1688990400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add secure compile macro</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102422" date="1694001600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: codecheck fix</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102423" date="1694433600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: containers in the FREEZING state also need to be unfreeze</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 4.0.3-2022102424" date="1699358400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: Add succeed message info for ocihook</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 4.0.3-2022102425" date="1702987200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: check cgroup path empty while setting freezer</changelog>
</package>
<package pkgid="bfce7c562791541a02140f1092b424a3d411fd10051f45603a6cca2f045cdeec" name="lxc-debugsource" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="2022102408.oe2203sp1"/>
  <changelog author="Neil.wrz&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022092001" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do mask paths after parent mounted</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022101101" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: skip kill cgroup processes if no hierarchies</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022101701" date="1666008000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update version to 4.0.3-2022101701</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.0.3-2022102401" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102403" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add macro to adapt musl libc</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102404" date="1669982400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add lxc-attach add-gids option</changelog>
  <changelog author="huangsong&lt;huangsong14@huawei.com&gt; - 4.0.3-2022102405" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: change the suffi parameter in lxc attach --help output</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102406" date="1672056000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: rollback strprint code modified</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102407" date="1672833600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add sscanf adapation code for musl</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102408" date="1673611200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix cve CVE-2022-47952 log leaks root information</changelog>
</package>
<package pkgid="d24303cea5c1c8456875748118714a820b664d38ba6afab2f72e0b45e06e7e71" name="lxc-debugsource" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="2022102423.oe2203sp1"/>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.0.3-2022102414" date="1677931200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add loongarch64 support for lxc</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102415" date="1680177600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: use ocihooks env after getenv</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102416" date="1681732800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mixed use of signed and unsigned type</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102417" date="1682078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove unused meminfo stats</changelog>
  <changelog author="Jian Zhang&lt;zhang_jian7@hoperun.com&gt; - 4.0.3-2022102418" date="1683201600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix lost return codes of spawned processe</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102419" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix load bpf failed</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102420" date="1686916800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mount device path incorrect</changelog>
  <changelog author="mzzhou&lt;1362843687@qq.com&gt; - 4.0.3-2022102421" date="1688990400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add secure compile macro</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102422" date="1694001600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: codecheck fix</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102423" date="1694433600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: containers in the FREEZING state also need to be unfreeze</changelog>
</package>
<package pkgid="ddcdebf26005533a141dacd686e65993b27d7546833e708cb8b160cef6f8d5da" name="lxc-debugsource" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="2022102425.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102416" date="1681732800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mixed use of signed and unsigned type</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102417" date="1682078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove unused meminfo stats</changelog>
  <changelog author="Jian Zhang&lt;zhang_jian7@hoperun.com&gt; - 4.0.3-2022102418" date="1683201600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix lost return codes of spawned processe</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102419" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix load bpf failed</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102420" date="1686916800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mount device path incorrect</changelog>
  <changelog author="mzzhou&lt;1362843687@qq.com&gt; - 4.0.3-2022102421" date="1688990400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add secure compile macro</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102422" date="1694001600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: codecheck fix</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102423" date="1694433600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: containers in the FREEZING state also need to be unfreeze</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 4.0.3-2022102424" date="1699358400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: Add succeed message info for ocihook</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 4.0.3-2022102425" date="1702987200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: check cgroup path empty while setting freezer</changelog>
</package>
<package pkgid="c21610266345a70483ed2ea4539e77d5499641f4841a11ac299c909326949c82" name="lxc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="2022102408.oe2203sp1"/>
  <changelog author="Neil.wrz&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022092001" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do mask paths after parent mounted</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022101101" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: skip kill cgroup processes if no hierarchies</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022101701" date="1666008000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update version to 4.0.3-2022101701</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.0.3-2022102401" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102403" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add macro to adapt musl libc</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102404" date="1669982400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add lxc-attach add-gids option</changelog>
  <changelog author="huangsong&lt;huangsong14@huawei.com&gt; - 4.0.3-2022102405" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: change the suffi parameter in lxc attach --help output</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102406" date="1672056000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: rollback strprint code modified</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102407" date="1672833600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add sscanf adapation code for musl</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102408" date="1673611200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix cve CVE-2022-47952 log leaks root information</changelog>
</package>
<package pkgid="8ca92959d58b04405538195c65714c9febe807833641c637109b25b120a98512" name="lxc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="2022102423.oe2203sp1"/>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.0.3-2022102414" date="1677931200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add loongarch64 support for lxc</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102415" date="1680177600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: use ocihooks env after getenv</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102416" date="1681732800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mixed use of signed and unsigned type</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102417" date="1682078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove unused meminfo stats</changelog>
  <changelog author="Jian Zhang&lt;zhang_jian7@hoperun.com&gt; - 4.0.3-2022102418" date="1683201600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix lost return codes of spawned processe</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102419" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix load bpf failed</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102420" date="1686916800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mount device path incorrect</changelog>
  <changelog author="mzzhou&lt;1362843687@qq.com&gt; - 4.0.3-2022102421" date="1688990400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add secure compile macro</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102422" date="1694001600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: codecheck fix</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102423" date="1694433600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: containers in the FREEZING state also need to be unfreeze</changelog>
</package>
<package pkgid="8799edab3f2cdccbbf948c625fa877e41a55b137426c9b8cb249abf14ed74a28" name="lxc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="2022102425.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102416" date="1681732800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mixed use of signed and unsigned type</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102417" date="1682078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove unused meminfo stats</changelog>
  <changelog author="Jian Zhang&lt;zhang_jian7@hoperun.com&gt; - 4.0.3-2022102418" date="1683201600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix lost return codes of spawned processe</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102419" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix load bpf failed</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102420" date="1686916800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mount device path incorrect</changelog>
  <changelog author="mzzhou&lt;1362843687@qq.com&gt; - 4.0.3-2022102421" date="1688990400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add secure compile macro</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102422" date="1694001600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: codecheck fix</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102423" date="1694433600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: containers in the FREEZING state also need to be unfreeze</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 4.0.3-2022102424" date="1699358400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: Add succeed message info for ocihook</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 4.0.3-2022102425" date="1702987200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: check cgroup path empty while setting freezer</changelog>
</package>
<package pkgid="6822114f1427a1643052d89b170043a2aa0c00eefa2a3b9507b03d45e6b53c1c" name="lxc-help" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="2022102408.oe2203sp1"/>
  <changelog author="Neil.wrz&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022092001" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do mask paths after parent mounted</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022101101" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: skip kill cgroup processes if no hierarchies</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022101701" date="1666008000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update version to 4.0.3-2022101701</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.0.3-2022102401" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102403" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add macro to adapt musl libc</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102404" date="1669982400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add lxc-attach add-gids option</changelog>
  <changelog author="huangsong&lt;huangsong14@huawei.com&gt; - 4.0.3-2022102405" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: change the suffi parameter in lxc attach --help output</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102406" date="1672056000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: rollback strprint code modified</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102407" date="1672833600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add sscanf adapation code for musl</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102408" date="1673611200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix cve CVE-2022-47952 log leaks root information</changelog>
</package>
<package pkgid="a75218e199bdee12f266679a493f3a9a36f6af5427988498a166fea670c20224" name="lxc-help" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="2022102423.oe2203sp1"/>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.0.3-2022102414" date="1677931200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add loongarch64 support for lxc</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102415" date="1680177600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: use ocihooks env after getenv</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102416" date="1681732800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mixed use of signed and unsigned type</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102417" date="1682078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove unused meminfo stats</changelog>
  <changelog author="Jian Zhang&lt;zhang_jian7@hoperun.com&gt; - 4.0.3-2022102418" date="1683201600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix lost return codes of spawned processe</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102419" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix load bpf failed</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102420" date="1686916800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mount device path incorrect</changelog>
  <changelog author="mzzhou&lt;1362843687@qq.com&gt; - 4.0.3-2022102421" date="1688990400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add secure compile macro</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102422" date="1694001600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: codecheck fix</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102423" date="1694433600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: containers in the FREEZING state also need to be unfreeze</changelog>
</package>
<package pkgid="6621de1061114631d6a7c18c011d045ba43834b364472c2be95d5e6a33afa0cb" name="lxc-help" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="2022102425.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102416" date="1681732800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mixed use of signed and unsigned type</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102417" date="1682078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove unused meminfo stats</changelog>
  <changelog author="Jian Zhang&lt;zhang_jian7@hoperun.com&gt; - 4.0.3-2022102418" date="1683201600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix lost return codes of spawned processe</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102419" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix load bpf failed</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102420" date="1686916800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mount device path incorrect</changelog>
  <changelog author="mzzhou&lt;1362843687@qq.com&gt; - 4.0.3-2022102421" date="1688990400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add secure compile macro</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102422" date="1694001600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: codecheck fix</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102423" date="1694433600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: containers in the FREEZING state also need to be unfreeze</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 4.0.3-2022102424" date="1699358400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: Add succeed message info for ocihook</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 4.0.3-2022102425" date="1702987200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: check cgroup path empty while setting freezer</changelog>
</package>
<package pkgid="29433216335cfe12863d1198838d27580a432353dc8544a279109e4792556549" name="lxc-libs" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="2022102408.oe2203sp1"/>
  <changelog author="Neil.wrz&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022092001" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do mask paths after parent mounted</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022101101" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: skip kill cgroup processes if no hierarchies</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022101701" date="1666008000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update version to 4.0.3-2022101701</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.0.3-2022102401" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102403" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add macro to adapt musl libc</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102404" date="1669982400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add lxc-attach add-gids option</changelog>
  <changelog author="huangsong&lt;huangsong14@huawei.com&gt; - 4.0.3-2022102405" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: change the suffi parameter in lxc attach --help output</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102406" date="1672056000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: rollback strprint code modified</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102407" date="1672833600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add sscanf adapation code for musl</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102408" date="1673611200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix cve CVE-2022-47952 log leaks root information</changelog>
</package>
<package pkgid="25c7caeeed33c43ad6ccf489bca681a61199a393e276a1b43e7caee3fcf19008" name="lxc-libs" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="2022102423.oe2203sp1"/>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.0.3-2022102414" date="1677931200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add loongarch64 support for lxc</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102415" date="1680177600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: use ocihooks env after getenv</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102416" date="1681732800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mixed use of signed and unsigned type</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102417" date="1682078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove unused meminfo stats</changelog>
  <changelog author="Jian Zhang&lt;zhang_jian7@hoperun.com&gt; - 4.0.3-2022102418" date="1683201600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix lost return codes of spawned processe</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102419" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix load bpf failed</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102420" date="1686916800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mount device path incorrect</changelog>
  <changelog author="mzzhou&lt;1362843687@qq.com&gt; - 4.0.3-2022102421" date="1688990400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add secure compile macro</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102422" date="1694001600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: codecheck fix</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102423" date="1694433600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: containers in the FREEZING state also need to be unfreeze</changelog>
</package>
<package pkgid="c9894db64c84b68b80a9f66a6b92e484084c5f4a8917db46ffff0f3a795ddc6c" name="lxc-libs" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="2022102425.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102416" date="1681732800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mixed use of signed and unsigned type</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102417" date="1682078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove unused meminfo stats</changelog>
  <changelog author="Jian Zhang&lt;zhang_jian7@hoperun.com&gt; - 4.0.3-2022102418" date="1683201600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix lost return codes of spawned processe</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102419" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix load bpf failed</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102420" date="1686916800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mount device path incorrect</changelog>
  <changelog author="mzzhou&lt;1362843687@qq.com&gt; - 4.0.3-2022102421" date="1688990400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add secure compile macro</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102422" date="1694001600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: codecheck fix</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102423" date="1694433600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: containers in the FREEZING state also need to be unfreeze</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 4.0.3-2022102424" date="1699358400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: Add succeed message info for ocihook</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 4.0.3-2022102425" date="1702987200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: check cgroup path empty while setting freezer</changelog>
</package>
<package pkgid="bb7ed86e19d68b9c5410c7766b4089ea06180ae83e67ee7b3dff977a8d5bbeb3" name="lxcfs-tools" arch="x86_64">
  <version epoch="0" ver="0.3" rel="33.oe2203sp1"/>
  <changelog author="wujie &lt;wujie@nj.iscas.ac.cn&gt; - 0.3-31" date="1688385600">- add riscv64 to syscall_linux_64.go build</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 0.3-32" date="1703678400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide error when isula info is abnormal</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 0.3-33" date="1706875200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support lxcfs reliability for docker</changelog>
</package>
<package pkgid="3cd1e0c8a17a5ac807e7be9072a7c55df2664859343f321187c0f41c88a14566" name="lxcfs-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.3" rel="33.oe2203sp1"/>
  <changelog author="wujie &lt;wujie@nj.iscas.ac.cn&gt; - 0.3-31" date="1688385600">- add riscv64 to syscall_linux_64.go build</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 0.3-32" date="1703678400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide error when isula info is abnormal</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 0.3-33" date="1706875200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support lxcfs reliability for docker</changelog>
</package>
<package pkgid="80535fef0d3208046324d8f87ff16fc7e5b7e1c6fc9abe9f907c8848cd842b75" name="lxcfs-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="0.3" rel="33.oe2203sp1"/>
  <changelog author="wujie &lt;wujie@nj.iscas.ac.cn&gt; - 0.3-31" date="1688385600">- add riscv64 to syscall_linux_64.go build</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 0.3-32" date="1703678400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide error when isula info is abnormal</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 0.3-33" date="1706875200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support lxcfs reliability for docker</changelog>
</package>
<package pkgid="513d39cd46088773fcdcf2922922a3cfca2baf2e32b3dd0d7353d55fb84a5b6e" name="mariadb" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="00ee6b6b728701a3ecb915e1b078e188b3a294ef1d3bc5505fd64044b4af215b" name="mariadb" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="46b843ea1b7cedde2dfe23e33e590fba0fc7de34c70975f5276e2b090794c2a4" name="mariadb-backup" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="471eaee4b14f4b82b907f2773b35152cb28c4e48976efd5f67b697186092e429" name="mariadb-backup" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="6fcf184d5419a52b51ca3b8c15b7f52efcd7d7fb52783f92eb965375f67a07b3" name="mariadb-common" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="fa053805810535c069bfacd7226b6be6e1b0255fc903c79194731825b046e894" name="mariadb-common" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="5645f8b89c35dd48d256e014f276bd8243a918ef94d2b16de264c975641ba228" name="mariadb-config" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="e38273c906f2a3102ae79f81042b9ba3cbdd93621ed0d50f74c4721b7df404c8" name="mariadb-config" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="dce42699f1048d54e9e79bb0bb82dc4404c0e05304c85500b0d2c9919f883e96" name="mariadb-debuginfo" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="c783e63946d96653c4aea262a68e214ce1004e1986a51fc3a01c1e378bdb70b9" name="mariadb-debuginfo" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="c4da5cd44df4c9e6b0325070ac35ec6b0e3c1c23c09474e5cab6c193d7729aff" name="mariadb-debugsource" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="97e36a8fa4b8e26c23fb6db8573d96c57af2febbf7f6cc40b55b4b8465b11694" name="mariadb-debugsource" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="299374be70dac6732921c9c146d3f928cc788b824a93cee89973c64a8649ee9a" name="mariadb-devel" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="0fa881f967dfc7c6b7ccde182a3bb52a8700e714bb354afaa4e2f4804df28153" name="mariadb-devel" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="06e6ba0c53f40da1bad67b5c0fe8696b9e0e8d94a17844f1eb0961b2d4ffb62b" name="mariadb-embedded" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="de8da601db5804c6580c65104bae301864a457f3b864ade6a0343d95f6cf6abe" name="mariadb-embedded" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="7e68276a667359373489a744587aa8eaa91830d0152081348dffbd2de30ffc22" name="mariadb-embedded-devel" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="0d0f4bace0f08fd8422f4d301ec33210191c10ff68b03e01f2ff5c74892f7c4e" name="mariadb-embedded-devel" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="daca1b5fd8fe9bd64b2f7fc8464e3df18e8756823d6efcf2cb79397c494e283e" name="mariadb-errmsg" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="645e976d6670e1437c5e0656196ac364af7e5eb829c7dd76c7e0ff22c9e37b2e" name="mariadb-errmsg" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="c33b1d36baaa71379ac034a326d168ce30a2d27afc6da3794c409daa8a059c64" name="mariadb-gssapi-server" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="798e7c133b900ab71a93b5d43d9380c4e3878424c92be4805067a9f86561d0fe" name="mariadb-gssapi-server" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="42bb557b61866efffe7e07ac552cdd49c4590fcc67bffed20285280c94743987" name="mariadb-oqgraph-engine" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="a7bb31c14751e040625579794590ba1fb9a7435a046fd13d5907947de181c4d1" name="mariadb-oqgraph-engine" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="70ab9662763f7c8e6f26ad8e43b5b2f61cd8b9c083a97a50c9440e4670e9a22e" name="mariadb-pam" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="2a8e2d86032a63e08815e66353b551d00008f776982633fe1e5ac565a6f6c80f" name="mariadb-pam" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="e5de2ef9e1937699a4784815ef058aee97a4aba806a6bd054a25e3eb1cd08e8e" name="mariadb-server" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="0ff87bddd63c09709e7fcfaba92ab96d860ba0ad2e8eb9331cba6c66e7a3ce63" name="mariadb-server" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="6be928338242e05168ee852d7faed4b5f6ba5e7ac7e34ffdd232454a40de093b" name="mariadb-server-galera" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="117ad64ed19959968f4081fe7f3ab8e01c17cdc2bf9d9e7713f5747b77393f92" name="mariadb-server-galera" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="58b5aa2651e432142f829fcddf42552ff2607d0ea2fd2de030efcf46049a6831" name="mariadb-server-utils" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="c95625a8aa0051055ef42aa5573f3400d944cfe63ae251fb5f523b21fb5eec85" name="mariadb-server-utils" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="83fb9347d9965bb41d96821d24599736f94406fcab1f0fafdfac5434f9be742b" name="mariadb-test" arch="x86_64">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="06a310defd5afc3c3ca8220308e7d239ee4fcea39bc946c8cfe0897191ed414b" name="mariadb-test" arch="x86_64">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="7503b0da839614045d25c2b9a4d12a675376fa3e61dfdb76f0ce3b23fe45faf3" name="metadata-extractor2" arch="noarch">
  <version epoch="0" ver="2.18.0" rel="1.oe2203sp1"/>
  <changelog author="xigaoxinyan &lt;xigaoxinyan@h-partners.com&gt; - 2.11.0-1" date="1653912000">- Update to 2.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 2.18.0-1" date="1691668800">- Update to 2.18.0</changelog>
</package>
<package pkgid="4d1d9b92e11e0cacbf415511f7257f51b39f45a73d5d99f502a6aaedae507dd8" name="metadata-extractor2-javadoc" arch="noarch">
  <version epoch="0" ver="2.18.0" rel="1.oe2203sp1"/>
  <changelog author="xigaoxinyan &lt;xigaoxinyan@h-partners.com&gt; - 2.11.0-1" date="1653912000">- Update to 2.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 2.18.0-1" date="1691668800">- Update to 2.18.0</changelog>
</package>
<package pkgid="1aa89304e9ec9d2362f6d182e4d698e2b44c3820d122d699f1e5fc1b61f9ae86" name="microcode_ctl" arch="x86_64">
  <version epoch="0" ver="2.1" rel="41.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.1-33" date="1632398400">- update version to 2.1-33, fix CVE-2020-24511 CVE-2020-24512</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2.1-36" date="1658232000">- Upgrade to 2.1-36
- Fix CVE-2021-0146</changelog>
  <changelog author="luopihui &lt;luopihui@Ncti-gba.cn&gt; - 2.1-37" date="1663934400">- Upgrade to 2.1-37
- Fix CVE-2022-21233</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1-41" date="1692792000">- Update to 2.1-41 for fix CVE-2022-40982,CVE-2022-38090 and CVE-2022-33196</changelog>
</package>
<package pkgid="ab1c2aa43bec4aa3ee28cca28bb2f02acabe2e75082edca23ae6a314a80f828d" name="microcode_ctl" arch="x86_64">
  <version epoch="0" ver="2.1" rel="42.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2.1-36" date="1658232000">- Upgrade to 2.1-36
- Fix CVE-2021-0146</changelog>
  <changelog author="luopihui &lt;luopihui@Ncti-gba.cn&gt; - 2.1-37" date="1663934400">- Upgrade to 2.1-37
- Fix CVE-2022-21233</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1-41" date="1692792000">- Update to 2.1-41 for fix CVE-2022-40982,CVE-2022-38090 and CVE-2022-33196</changelog>
  <changelog author="lwg K &lt;weigangli99@gmail.com&gt; - 2.1-42" date="1700049600">- update to upstream 2.1-42. 20231114
- fix CVE-2023-23583</changelog>
</package>
<package pkgid="564852e1f11c7d39f9b78488e3ba51ee1593bdca2443b4c2230f8d97004d4003" name="microcode_ctl" arch="x86_64">
  <version epoch="0" ver="20240312" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2.1-36" date="1658232000">- Upgrade to 2.1-36
- Fix CVE-2021-0146</changelog>
  <changelog author="luopihui &lt;luopihui@Ncti-gba.cn&gt; - 2.1-37" date="1663934400">- Upgrade to 2.1-37
- Fix CVE-2022-21233</changelog>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 2.1-38" date="1668427200">- add loongarch support</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.1-39" date="1692619200">- Fix compilation failure caused by tar upgrade</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1-41" date="1692792000">- Update to 2.1-41 for fix CVE-2022-40982,CVE-2022-38090 and CVE-2022-33196</changelog>
  <changelog author="lwg K &lt;weigangli99@gmail.com&gt; - 2.1-42" date="1700049600">- update to upstream 2.1-42. 20231114
- fix CVE-2023-23583</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 20231114-1" date="1704801600">- Modify Source0 to get it form github</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 20231114-2" date="1709553600">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240312-1" date="1710417600">- Update to 20240312 for fix CVE-2023-38575</changelog>
</package>
<package pkgid="cd40c1417a106f61b5f0c833a6b7087916e06572f834e24569d838da3b360eca" name="microcode_ctl" arch="x86_64">
  <version epoch="0" ver="20240531" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2.1-36" date="1658232000">- Upgrade to 2.1-36
- Fix CVE-2021-0146</changelog>
  <changelog author="luopihui &lt;luopihui@Ncti-gba.cn&gt; - 2.1-37" date="1663934400">- Upgrade to 2.1-37
- Fix CVE-2022-21233</changelog>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 2.1-38" date="1668427200">- add loongarch support</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.1-39" date="1692619200">- Fix compilation failure caused by tar upgrade</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1-41" date="1692792000">- Update to 2.1-41 for fix CVE-2022-40982,CVE-2022-38090 and CVE-2022-33196</changelog>
  <changelog author="lwg K &lt;weigangli99@gmail.com&gt; - 2.1-42" date="1700049600">- update to upstream 2.1-42. 20231114
- fix CVE-2023-23583</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 20231114-1" date="1704801600">- Modify Source0 to get it form github</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 20231114-2" date="1709553600">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240312-1" date="1710417600">- Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
  CVE-2023-22655, CVE-2023-43490, CVE-2023-28746</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240531-1" date="1718107200">- Update to 20240531 for fix CVE-2023-45733, CVE-2023-45745,
  CVE-2023-46103, CVE-2023-47855</changelog>
</package>
<package pkgid="d7da6911d3c2aa95abe82bd1810cd7da41a9079b7329a7f9fe82b7e6738a5d08" name="minizip" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="23.oe2203sp1"/>
  <changelog author="Jun Yang &lt;jun.yang@suse.com&gt; - 1.2.11-19" date="1635768000">- list all the patches for aarch64 to make the source rpm same both for x86_64 and aarch64.</changelog>
  <changelog author="tinawei &lt;tianwei12@h-partners.com&gt; - 1.2.11-20" date="1651060800">- Fix CVE-2018-25032</changelog>
  <changelog author="tinawei &lt;tianwei12@h-partners.com&gt; - 1.2.11-21" date="1652184000">- Fix patches info for pre</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.11-22" date="1660305600">- fix CVE-2022-37434</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.2.11-23" date="1672056000">- DESC:remove unapplied patch</changelog>
</package>
<package pkgid="8ef7f45e2bf3ba1a5a288c237005689ad80213aa9ff067c25ab8da6060ddfd3e" name="minizip" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="24.oe2203sp1"/>
  <changelog author="Jun Yang &lt;jun.yang@suse.com&gt; - 1.2.11-19" date="1635768000">- list all the patches for aarch64 to make the source rpm same both for x86_64 and aarch64.</changelog>
  <changelog author="tinawei &lt;tianwei12@h-partners.com&gt; - 1.2.11-20" date="1651060800">- Fix CVE-2018-25032</changelog>
  <changelog author="tinawei &lt;tianwei12@h-partners.com&gt; - 1.2.11-21" date="1652184000">- Fix patches info for pre</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.11-22" date="1660305600">- fix CVE-2022-37434</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.2.11-23" date="1672056000">- DESC:remove unapplied patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.2.11-24" date="1697544000">- DESC:Fix CVE-2023-45853</changelog>
</package>
<package pkgid="ed5f053ae5e2a8b0ac949a25b59a63e15cc9f6f9d6d72099365b51bdad3b8162" name="minizip-devel" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="23.oe2203sp1"/>
  <changelog author="Jun Yang &lt;jun.yang@suse.com&gt; - 1.2.11-19" date="1635768000">- list all the patches for aarch64 to make the source rpm same both for x86_64 and aarch64.</changelog>
  <changelog author="tinawei &lt;tianwei12@h-partners.com&gt; - 1.2.11-20" date="1651060800">- Fix CVE-2018-25032</changelog>
  <changelog author="tinawei &lt;tianwei12@h-partners.com&gt; - 1.2.11-21" date="1652184000">- Fix patches info for pre</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.11-22" date="1660305600">- fix CVE-2022-37434</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.2.11-23" date="1672056000">- DESC:remove unapplied patch</changelog>
</package>
<package pkgid="288fbca49f01e399af847ac1a83c2c0dc8cb318ddb33c7143bf07033180a4a8b" name="minizip-devel" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="24.oe2203sp1"/>
  <changelog author="Jun Yang &lt;jun.yang@suse.com&gt; - 1.2.11-19" date="1635768000">- list all the patches for aarch64 to make the source rpm same both for x86_64 and aarch64.</changelog>
  <changelog author="tinawei &lt;tianwei12@h-partners.com&gt; - 1.2.11-20" date="1651060800">- Fix CVE-2018-25032</changelog>
  <changelog author="tinawei &lt;tianwei12@h-partners.com&gt; - 1.2.11-21" date="1652184000">- Fix patches info for pre</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.11-22" date="1660305600">- fix CVE-2022-37434</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.2.11-23" date="1672056000">- DESC:remove unapplied patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.2.11-24" date="1697544000">- DESC:Fix CVE-2023-45853</changelog>
</package>
<package pkgid="34a2decb83a6d64cf6dac82cafe13924bce7bfd90aa9407a75dc7d9d03d2b9c8" name="mod_auth_openidc" arch="x86_64">
  <version epoch="0" ver="2.4.13.2" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; 2.4.0.3-4" date="1623326400">- Fix CVE-2021-20718</changelog>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; 2.4.9.4-1" date="1631707200">- Upgrade to 2.4.9.4
- Fix CVE-2021-39191</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.4.13.2-1" date="1681300800">- Update to 2.4.13.2 to fix CVE-2023-28625</changelog>
</package>
<package pkgid="8fa300ffc22c390e977d35e5aa18dc4fe0e0fb1bae7a0d327ff5a7791489faae" name="mod_auth_openidc" arch="x86_64">
  <version epoch="0" ver="2.4.15.3" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.4.13.2-1" date="1681300800">- Update to 2.4.13.2 to fix CVE-2023-28625</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.4.15.3-1" date="1708171200">- Upgrade to 2.4.15.3 for fix CVE-2024-24814</changelog>
</package>
<package pkgid="c80d370d2a6c5d4dd1679b16c7f1c5bf530c1ce6f3910191b08f82d44ce93cea" name="mod_auth_openidc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.13.2" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; 2.4.0.3-4" date="1623326400">- Fix CVE-2021-20718</changelog>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; 2.4.9.4-1" date="1631707200">- Upgrade to 2.4.9.4
- Fix CVE-2021-39191</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.4.13.2-1" date="1681300800">- Update to 2.4.13.2 to fix CVE-2023-28625</changelog>
</package>
<package pkgid="ff265f2b4a7b13c2cc6581b7e696a6d03884d8322b0dbb177abe78f447bc0f91" name="mod_auth_openidc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.15.3" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.4.13.2-1" date="1681300800">- Update to 2.4.13.2 to fix CVE-2023-28625</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.4.15.3-1" date="1708171200">- Upgrade to 2.4.15.3 for fix CVE-2024-24814</changelog>
</package>
<package pkgid="8878e4110afd385338943b06148b5b11cd5c96a380dc6729ac7c6ba9e96ce16a" name="mod_auth_openidc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.13.2" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; 2.4.0.3-4" date="1623326400">- Fix CVE-2021-20718</changelog>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; 2.4.9.4-1" date="1631707200">- Upgrade to 2.4.9.4
- Fix CVE-2021-39191</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.4.13.2-1" date="1681300800">- Update to 2.4.13.2 to fix CVE-2023-28625</changelog>
</package>
<package pkgid="44787e9a768d9fcb3008e89a1693c80eabb29331fab469369c66ba11d7e7bb28" name="mod_auth_openidc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.15.3" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.4.13.2-1" date="1681300800">- Update to 2.4.13.2 to fix CVE-2023-28625</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.4.15.3-1" date="1708171200">- Upgrade to 2.4.15.3 for fix CVE-2024-24814</changelog>
</package>
<package pkgid="aa334f2e664e39b936b018758986205917feb84b5bbf51143c46a2d52b6a8991" name="mod_http2" arch="x86_64">
  <version epoch="0" ver="1.15.25" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.15.25-2" date="1666180800">- Typebugfix
- ID:NA
- SUG:NA
- DESC:modify description about mod_http2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.15.25-3" date="1712491200">- Type:cves
- CVE:CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-27316</changelog>
</package>
<package pkgid="eb71a640823de8b11ee62c1de0ade56dfba13d1f38bcc02936c6a724e843d5f2" name="mod_http2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.25" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.15.25-2" date="1666180800">- Typebugfix
- ID:NA
- SUG:NA
- DESC:modify description about mod_http2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.15.25-3" date="1712491200">- Type:cves
- CVE:CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-27316</changelog>
</package>
<package pkgid="9fbc2125b7703d1902a074d4fe86b7e7984e5f3b714b1972d303506cfceb10c1" name="mod_http2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.15.25" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.15.25-2" date="1666180800">- Typebugfix
- ID:NA
- SUG:NA
- DESC:modify description about mod_http2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.15.25-3" date="1712491200">- Type:cves
- CVE:CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-27316</changelog>
</package>
<package pkgid="0139c3bd7f9dbc755015f60d5261f7444278c7e16a9fb0ff111c7b3caf03c3a7" name="mod_http2-help" arch="noarch">
  <version epoch="0" ver="1.15.25" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.15.25-2" date="1666180800">- Typebugfix
- ID:NA
- SUG:NA
- DESC:modify description about mod_http2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.15.25-3" date="1712491200">- Type:cves
- CVE:CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-27316</changelog>
</package>
<package pkgid="8063947dd69939a1953392b3e53116403edb83a6ed3d2aa5e19067769adefb51" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="20d3d1e342776c8cf4a094e6eed61e0a4333bb5791100ee42984e19e52353768" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="806168833b88c9d2b3c1b7cf8983d199f4e6f7cbb3e99f0df2077117ce32ba2c" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="b65858fba6c721a120f4ba299b0fc789d1be2db5e3a9ea04c2ba6229d4323c7a" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="a9d5731cb9a377b2905f4c19b6731d1ff9840a4594d40803f0231df7d9a3606c" name="mod_md" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="bcc926ba3aa5f8896b0b428fb5636ce9ce281854ec87e4639f841a838362c8fc" name="mod_md" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="da2268dff2f75735419d9516f774143bb8da17ac6e00bb52eca1f3c9bb951948" name="mod_md" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="6b91aca119a74c8661fac1ea464c5c76668da55e51101d06b7fbccce10dc1476" name="mod_md" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="1cee4b9801923594e106369ab4a12c00e93cc6cf925525e19ef53b5106396ed3" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="10fa57621555b43b0dc5e749945068fe007ea172f59ed4ba3407052c76385d24" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="3e53a617c50ca644c025458f150d2dcc381c447d95181b8717382d036f463422" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="8c7b3dfffdadf504404e0b4b4708a86c52fa2cfad80035bcd5a95edbbb212aef" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="e4dca61cb97f19e51edc317c9fda43b759257beeccc1d5391a1b42eb7fc2f3eb" name="mod_security" arch="x86_64">
  <version epoch="0" ver="2.9.5" rel="9.oe2203sp1"/>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-3" date="1673006400">- backport use uid if user name is not available</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-4" date="1673006401">- backport properly cleanup XML parser contexts upon completion</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-5" date="1673092800">- backport Add SecRequestBodyJsonDepthLimit to modsecurity.conf-recommended</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-6" date="1673092801">- backport fix memory leak that occurs on JSON parsing error</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-7" date="1673092802">- backport Set SecStatusEngine Off in modsecurity.conf-recommended</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-8" date="1673265600">- backport allow no-key, single-value JSON body</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.5-9" date="1711454400">- Fix CVE-2022-48279</changelog>
</package>
<package pkgid="ada5c55a4b4b8cd32f66473fb6e92a81df520bf7f2ad258c3a93f9204687e474" name="mod_security-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.5" rel="9.oe2203sp1"/>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-3" date="1673006400">- backport use uid if user name is not available</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-4" date="1673006401">- backport properly cleanup XML parser contexts upon completion</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-5" date="1673092800">- backport Add SecRequestBodyJsonDepthLimit to modsecurity.conf-recommended</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-6" date="1673092801">- backport fix memory leak that occurs on JSON parsing error</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-7" date="1673092802">- backport Set SecStatusEngine Off in modsecurity.conf-recommended</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-8" date="1673265600">- backport allow no-key, single-value JSON body</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.5-9" date="1711454400">- Fix CVE-2022-48279</changelog>
</package>
<package pkgid="51aa2dd3a377112aaf93deca8d094652adf3136322b9f562fc9427dc26f224ba" name="mod_security-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.5" rel="9.oe2203sp1"/>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-3" date="1673006400">- backport use uid if user name is not available</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-4" date="1673006401">- backport properly cleanup XML parser contexts upon completion</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-5" date="1673092800">- backport Add SecRequestBodyJsonDepthLimit to modsecurity.conf-recommended</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-6" date="1673092801">- backport fix memory leak that occurs on JSON parsing error</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-7" date="1673092802">- backport Set SecStatusEngine Off in modsecurity.conf-recommended</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-8" date="1673265600">- backport allow no-key, single-value JSON body</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.5-9" date="1711454400">- Fix CVE-2022-48279</changelog>
</package>
<package pkgid="7d9ad10232847785f0ac5ccd07bd7875263f0c8cd84d36c140e5104e09610f06" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="7972d4e57f66b6d89acd16265b06bc36922a8c49ed07021a0d1d88181297fdab" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="d5e2656573fcbcea24a7359971d0a59c192b1d62f78ace66077b2529833081cc" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="2c0987d8daddf96842b211d92bbff50a4580a0e106175704e24734f01f09ebe7" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="f26fb9598df24ab0ac3ec8b56d76905abf39a447d4cd49b4e11f6d683af34947" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="71e79e2cc7a580c67240bc59de376519e83ab68692011e915ac78c63a7b92166" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="74bea690b387620efd6a378b3a26cecff3dc6d194b225043017f71b044d716b5" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="e5f16318c074ddb1be4bd17ceba4831d60b355acf287a39e0689116235948ed7" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="352765e5807556528ab89b6cc1a299b04f9b5b05edbcffa08c79caa9380ab595" name="mongo-c-driver" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
</package>
<package pkgid="a29d33f3ea804a6b943e4d1b4171eeb93bc1efca662d4381eb98f01e8331bd46" name="mongo-c-driver" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.13.1-7" date="1705406400">- Fix CVE-2023-0437</changelog>
</package>
<package pkgid="008987294718311ea16606b4a8dd7bf55e4b5ed93e919d2d0dc91051fe4dcf6c" name="mongo-c-driver-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
</package>
<package pkgid="934bb0fe433ad65cff7965ab77244af233187950eb4bdb278e23fbd4a6f4456a" name="mongo-c-driver-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.13.1-7" date="1705406400">- Fix CVE-2023-0437</changelog>
</package>
<package pkgid="4927011c5b20da376b2ea2b89ca086ca5e91ab684b34610afb0be7814015f374" name="mongo-c-driver-debugsource" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
</package>
<package pkgid="8366f5e07abf2f239e270e2dc3bd5820bfa144fde4777622e126e806d1906aa7" name="mongo-c-driver-debugsource" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.13.1-7" date="1705406400">- Fix CVE-2023-0437</changelog>
</package>
<package pkgid="256bff542eb3b252ac27a1fc9d3ff23295ed95e862ec765ad58f198ee5e2d14c" name="mongo-c-driver-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
</package>
<package pkgid="213424349cefb48f937913bb0faaa7bc8fcf0d6bf599becdd861935933cd7ecf" name="mongo-c-driver-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.13.1-7" date="1705406400">- Fix CVE-2023-0437</changelog>
</package>
<package pkgid="da80e63908ef1aa7b93f1819340122dca841400a1dad0a8057b21372b6678383" name="mongo-c-driver-help" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
</package>
<package pkgid="869cd48c497ce8f534cfcfc39ef74f83a341454c0c359969646e9f30b41074a3" name="mongo-c-driver-help" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.13.1-7" date="1705406400">- Fix CVE-2023-0437</changelog>
</package>
<package pkgid="e9bb0cd65bc6e8e1a8c0529ae4769962d72e6831e536e2731564f49e2e8e4af8" name="mozjs91" arch="x86_64">
  <version epoch="0" ver="91.6.0" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 91.6.0-2" date="1648123200">- remove .oe2203sp1</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 91.6.0-3" date="1693310400">- add support for loongarch64 and sw_64</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-4" date="1711022400">- fix CVEs</changelog>
</package>
<package pkgid="2c760497c83cd97910e49db8d21bb25a3de4a874aa88f6f71e9f042c9a087a20" name="mozjs91" arch="x86_64">
  <version epoch="0" ver="91.6.0" rel="5.oe2203sp1"/>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 91.6.0-3" date="1693310400">- add support for loongarch64 and sw_64</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-4" date="1711022400">- fix CVEs</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-5" date="1717675200">- fix CVEs</changelog>
</package>
<package pkgid="e2c5af24c10d7374705a8f0b2c58a5066911fb9a7f12e940865163a802d51f47" name="mozjs91-debuginfo" arch="x86_64">
  <version epoch="0" ver="91.6.0" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 91.6.0-2" date="1648123200">- remove .oe2203sp1</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 91.6.0-3" date="1693310400">- add support for loongarch64 and sw_64</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-4" date="1711022400">- fix CVEs</changelog>
</package>
<package pkgid="135b8228aa419b468f7b6e5b8707ea4fe2ba195e40145794d5974c1882f7807b" name="mozjs91-debuginfo" arch="x86_64">
  <version epoch="0" ver="91.6.0" rel="5.oe2203sp1"/>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 91.6.0-3" date="1693310400">- add support for loongarch64 and sw_64</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-4" date="1711022400">- fix CVEs</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-5" date="1717675200">- fix CVEs</changelog>
</package>
<package pkgid="604b00fbb37b83dace890bc6ec94fd227e61b94538c403ab59a8c49bd7c3ea60" name="mozjs91-debugsource" arch="x86_64">
  <version epoch="0" ver="91.6.0" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 91.6.0-2" date="1648123200">- remove .oe2203sp1</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 91.6.0-3" date="1693310400">- add support for loongarch64 and sw_64</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-4" date="1711022400">- fix CVEs</changelog>
</package>
<package pkgid="ba0112f4c8e5b66468f59f65e3d8007cf7724ff33f7068ff5ebef58d67b092d5" name="mozjs91-debugsource" arch="x86_64">
  <version epoch="0" ver="91.6.0" rel="5.oe2203sp1"/>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 91.6.0-3" date="1693310400">- add support for loongarch64 and sw_64</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-4" date="1711022400">- fix CVEs</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-5" date="1717675200">- fix CVEs</changelog>
</package>
<package pkgid="c17e3f3ebeb7c43b779a207f86e4871c3226048960135fcecd9d55c5e39a5fa2" name="mozjs91-devel" arch="x86_64">
  <version epoch="0" ver="91.6.0" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 91.6.0-2" date="1648123200">- remove .oe2203sp1</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 91.6.0-3" date="1693310400">- add support for loongarch64 and sw_64</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-4" date="1711022400">- fix CVEs</changelog>
</package>
<package pkgid="ba5f1f0c005f8da62fe8de60c252a04587ef9a762825791774e73373bf044c68" name="mozjs91-devel" arch="x86_64">
  <version epoch="0" ver="91.6.0" rel="5.oe2203sp1"/>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 91.6.0-3" date="1693310400">- add support for loongarch64 and sw_64</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-4" date="1711022400">- fix CVEs</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-5" date="1717675200">- fix CVEs</changelog>
</package>
<package pkgid="f736fc1837830b89dc1968b66953eef0217d0db12a9a5653fc391869d39a3003" name="mrtg" arch="x86_64">
  <version epoch="0" ver="2.17.7" rel="3.oe2203sp1"/>
  <changelog author="openEuler Buildteam &lt;buildteam@openeuler.org&gt; - 2.17.7-3" date="1574337600">- Package init</changelog>
</package>
<package pkgid="15e769ab851a2559870bc06ddee91a8703139e1112384bd64a3684e467fe64d0" name="mrtg-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.17.7" rel="3.oe2203sp1"/>
  <changelog author="openEuler Buildteam &lt;buildteam@openeuler.org&gt; - 2.17.7-3" date="1574337600">- Package init</changelog>
</package>
<package pkgid="471fbb89abfc427cd4dd097791fecc4d37dd5b773f1ff1461186653dc36ff9ed" name="mrtg-debugsource" arch="x86_64">
  <version epoch="0" ver="2.17.7" rel="3.oe2203sp1"/>
  <changelog author="openEuler Buildteam &lt;buildteam@openeuler.org&gt; - 2.17.7-3" date="1574337600">- Package init</changelog>
</package>
<package pkgid="656de1956bbdecbec86a3590aa4e36519483a134bceca82ac55110db955a0566" name="mrtg-help" arch="noarch">
  <version epoch="0" ver="2.17.7" rel="3.oe2203sp1"/>
  <changelog author="openEuler Buildteam &lt;buildteam@openeuler.org&gt; - 2.17.7-3" date="1574337600">- Package init</changelog>
</package>
<package pkgid="10a932bdcd425e4239223c54c5c9d6566a777e67d0c0d25f0fe5a2a30946b88b" name="mutt" arch="x86_64">
  <version epoch="5" ver="2.2.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin&lt;yaoxin30@huawei.com&gt; - 1.10.1-7" date="1634299200">- fix CVE-2020-14154</changelog>
  <changelog author="gaihuiying1&lt;gaihuiying@huawei.com&gt; - 2.1.3-1" date="1640692800">- Type:requirement
- Id:NA
- SUG:NA
- DESC:update mutt to 2.1.3</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.1.3-2" date="1650801600">- Fix CVE-2022-1328</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5:2.2.12-1" date="1694692800">- Update to 2.2.12 for fix CVE-2023-4874 and CVE-2023-4875</changelog>
</package>
<package pkgid="19631d7b3dbedf5c19a50836dd3e2e124458ba7c01878adb121bae4b605d80f3" name="mutt-debuginfo" arch="x86_64">
  <version epoch="5" ver="2.2.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin&lt;yaoxin30@huawei.com&gt; - 1.10.1-7" date="1634299200">- fix CVE-2020-14154</changelog>
  <changelog author="gaihuiying1&lt;gaihuiying@huawei.com&gt; - 2.1.3-1" date="1640692800">- Type:requirement
- Id:NA
- SUG:NA
- DESC:update mutt to 2.1.3</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.1.3-2" date="1650801600">- Fix CVE-2022-1328</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5:2.2.12-1" date="1694692800">- Update to 2.2.12 for fix CVE-2023-4874 and CVE-2023-4875</changelog>
</package>
<package pkgid="7c736983eb0df02cbb7a49b5f1537f3cd2a15b42e47e1cabf998b754bbf26fd7" name="mutt-debugsource" arch="x86_64">
  <version epoch="5" ver="2.2.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin&lt;yaoxin30@huawei.com&gt; - 1.10.1-7" date="1634299200">- fix CVE-2020-14154</changelog>
  <changelog author="gaihuiying1&lt;gaihuiying@huawei.com&gt; - 2.1.3-1" date="1640692800">- Type:requirement
- Id:NA
- SUG:NA
- DESC:update mutt to 2.1.3</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.1.3-2" date="1650801600">- Fix CVE-2022-1328</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5:2.2.12-1" date="1694692800">- Update to 2.2.12 for fix CVE-2023-4874 and CVE-2023-4875</changelog>
</package>
<package pkgid="e7dbcb395d3df79fb55cf628ba79428dc833731feb81a4a5ff91cef56204b4f2" name="mutt-help" arch="noarch">
  <version epoch="5" ver="2.2.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin&lt;yaoxin30@huawei.com&gt; - 1.10.1-7" date="1634299200">- fix CVE-2020-14154</changelog>
  <changelog author="gaihuiying1&lt;gaihuiying@huawei.com&gt; - 2.1.3-1" date="1640692800">- Type:requirement
- Id:NA
- SUG:NA
- DESC:update mutt to 2.1.3</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.1.3-2" date="1650801600">- Fix CVE-2022-1328</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5:2.2.12-1" date="1694692800">- Update to 2.2.12 for fix CVE-2023-4874 and CVE-2023-4875</changelog>
</package>
<package pkgid="9770aea97e2ca922224e828202203986d05e5d15525643ba332c9bc154e0fa83" name="mutter" arch="x86_64">
  <version epoch="0" ver="3.38.4" rel="8.oe2203sp1"/>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.4-4" date="1660132800">- Add BuildRequires cvt</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.4-5" date="1660132801">- add BuildRequires for riscv from &lt;xiaoqian@nj.iscas.ac.cn&gt; @ Wed Jan 12 2022</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 3.38.4-6" date="1670932800">- add BuildRequires for loongarch64</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.38.4-7" date="1671019200">- Add sw64 architecture</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 3.38.4-8" date="1708344000">- rebuild for glib2 without sysprof and add requires sysprof-capture-4</changelog>
</package>
<package pkgid="fe82a61369aaa678ecb2d8b8a38033f00536111410896d5bf9e045b17370e586" name="mutter-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.38.4" rel="8.oe2203sp1"/>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.4-4" date="1660132800">- Add BuildRequires cvt</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.4-5" date="1660132801">- add BuildRequires for riscv from &lt;xiaoqian@nj.iscas.ac.cn&gt; @ Wed Jan 12 2022</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 3.38.4-6" date="1670932800">- add BuildRequires for loongarch64</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.38.4-7" date="1671019200">- Add sw64 architecture</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 3.38.4-8" date="1708344000">- rebuild for glib2 without sysprof and add requires sysprof-capture-4</changelog>
</package>
<package pkgid="671e9737b0f18d4e2932f4eac15d93d2061b2921ae0e6eb394d32c686099ef03" name="mutter-debugsource" arch="x86_64">
  <version epoch="0" ver="3.38.4" rel="8.oe2203sp1"/>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.4-4" date="1660132800">- Add BuildRequires cvt</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.4-5" date="1660132801">- add BuildRequires for riscv from &lt;xiaoqian@nj.iscas.ac.cn&gt; @ Wed Jan 12 2022</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 3.38.4-6" date="1670932800">- add BuildRequires for loongarch64</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.38.4-7" date="1671019200">- Add sw64 architecture</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 3.38.4-8" date="1708344000">- rebuild for glib2 without sysprof and add requires sysprof-capture-4</changelog>
</package>
<package pkgid="3f633439301f8b027058fe4796b97469bb3fc3025e421a487a45574cf018bcc4" name="mutter-devel" arch="x86_64">
  <version epoch="0" ver="3.38.4" rel="8.oe2203sp1"/>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.4-4" date="1660132800">- Add BuildRequires cvt</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.4-5" date="1660132801">- add BuildRequires for riscv from &lt;xiaoqian@nj.iscas.ac.cn&gt; @ Wed Jan 12 2022</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 3.38.4-6" date="1670932800">- add BuildRequires for loongarch64</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.38.4-7" date="1671019200">- Add sw64 architecture</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 3.38.4-8" date="1708344000">- rebuild for glib2 without sysprof and add requires sysprof-capture-4</changelog>
</package>
<package pkgid="812ed394241075c95df995aab7b1c42bdbf6ccf9b76073505d039bf869887fbf" name="mutter-help" arch="noarch">
  <version epoch="0" ver="3.38.4" rel="8.oe2203sp1"/>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.4-4" date="1660132800">- Add BuildRequires cvt</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.4-5" date="1660132801">- add BuildRequires for riscv from &lt;xiaoqian@nj.iscas.ac.cn&gt; @ Wed Jan 12 2022</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 3.38.4-6" date="1670932800">- add BuildRequires for loongarch64</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.38.4-7" date="1671019200">- Add sw64 architecture</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 3.38.4-8" date="1708344000">- rebuild for glib2 without sysprof and add requires sysprof-capture-4</changelog>
</package>
<package pkgid="2d6b4f155a6fa5be8c73841b8f5a1745084edc80a4cf770ae0872d71307b62bd" name="mysql" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.oe2203sp1"/>
  <changelog author="maminjie &lt;maminjie1@huawei.com&gt; - 8.0.21-2" date="1600516800">- fix internal compiler error: Segmentation fault</changelog>
  <changelog author="weishengjing &lt;weishengjing1@huawei.com&gt; - 8.0.22-1" date="1606824000">- New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
   CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
   CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
   CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
   CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
   CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
   CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
   CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
   CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
   CVE-2020-14814 CVE-2020-14790 CVE-2020-14809</changelog>
  <changelog author="Shengjing Wei &lt;weishengjing1@huawei.com&gt; - 8.0.22-2" date="1610539200">- Delete useless information</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 8.0.23-1" date="1615377600">- Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
  CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
  CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
  CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
  CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
  CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 8.0.24-1" date="1620475200">- Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
  CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
  CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
  CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
  CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
  CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
  CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
  CVE-2021-2308</changelog>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
</package>
<package pkgid="bb7512cf0d07803d35c8e548afd4991ca8405d237c7e54566b0e45e8415f169e" name="mysql" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="2.oe2203sp1"/>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-2" date="1684238400">- Fix CVE-2022-37434</changelog>
</package>
<package pkgid="1525ee3e11b9903bb4061bc0a34216e08d75e2bf782e57e8c3530e6705595ae5" name="mysql" arch="x86_64">
  <version epoch="0" ver="8.0.35" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
</package>
<package pkgid="d5069afb8b373a1b55fef38b3df62b8e98db308a0e0faef72154ef63908ed06e" name="mysql" arch="x86_64">
  <version epoch="0" ver="8.0.37" rel="1.oe2203sp1"/>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
</package>
<package pkgid="9dfe3198d648398c6242a197515138f318d1380f0689723e04562338568017fd" name="mysql-common" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.oe2203sp1"/>
  <changelog author="maminjie &lt;maminjie1@huawei.com&gt; - 8.0.21-2" date="1600516800">- fix internal compiler error: Segmentation fault</changelog>
  <changelog author="weishengjing &lt;weishengjing1@huawei.com&gt; - 8.0.22-1" date="1606824000">- New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
   CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
   CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
   CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
   CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
   CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
   CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
   CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
   CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
   CVE-2020-14814 CVE-2020-14790 CVE-2020-14809</changelog>
  <changelog author="Shengjing Wei &lt;weishengjing1@huawei.com&gt; - 8.0.22-2" date="1610539200">- Delete useless information</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 8.0.23-1" date="1615377600">- Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
  CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
  CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
  CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
  CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
  CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 8.0.24-1" date="1620475200">- Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
  CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
  CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
  CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
  CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
  CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
  CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
  CVE-2021-2308</changelog>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
</package>
<package pkgid="c48e2f72c32c748c98019eacce6163010aff89271f2b24b1edda9e02e740a6a4" name="mysql-common" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="2.oe2203sp1"/>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-2" date="1684238400">- Fix CVE-2022-37434</changelog>
</package>
<package pkgid="8acce5a9705bc163d9f71e923fcac0f1a89f2f1689178ad22a238244335a72e2" name="mysql-common" arch="x86_64">
  <version epoch="0" ver="8.0.35" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
</package>
<package pkgid="47daa02ce2adb3ec1087fe521825ca4f632536723e7b7bbae7e5b35d638a7b3d" name="mysql-common" arch="x86_64">
  <version epoch="0" ver="8.0.37" rel="1.oe2203sp1"/>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
</package>
<package pkgid="a96dd022109a53806a92a4488e3a743c4e9ece17a8660beb3831d759b7a2222e" name="mysql-config" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.oe2203sp1"/>
  <changelog author="maminjie &lt;maminjie1@huawei.com&gt; - 8.0.21-2" date="1600516800">- fix internal compiler error: Segmentation fault</changelog>
  <changelog author="weishengjing &lt;weishengjing1@huawei.com&gt; - 8.0.22-1" date="1606824000">- New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
   CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
   CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
   CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
   CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
   CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
   CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
   CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
   CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
   CVE-2020-14814 CVE-2020-14790 CVE-2020-14809</changelog>
  <changelog author="Shengjing Wei &lt;weishengjing1@huawei.com&gt; - 8.0.22-2" date="1610539200">- Delete useless information</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 8.0.23-1" date="1615377600">- Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
  CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
  CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
  CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
  CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
  CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 8.0.24-1" date="1620475200">- Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
  CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
  CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
  CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
  CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
  CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
  CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
  CVE-2021-2308</changelog>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
</package>
<package pkgid="c88ba86435dee30d93740db2d16804f150cb8265ace0220bb0c733bb115344f2" name="mysql-config" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="2.oe2203sp1"/>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-2" date="1684238400">- Fix CVE-2022-37434</changelog>
</package>
<package pkgid="73113c6f4493756f1744a9788df0dacbb94b900e903eec3cd3e2fa5f25f6ee99" name="mysql-config" arch="x86_64">
  <version epoch="0" ver="8.0.35" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
</package>
<package pkgid="37eb82a618a2a2e3a33909d02c88f9c2bcb334c2fce77ecc5dc25d78cf7caff2" name="mysql-config" arch="x86_64">
  <version epoch="0" ver="8.0.37" rel="1.oe2203sp1"/>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
</package>
<package pkgid="6a9894a1d9bd0737cc5d0cc403347355ac22ec52b72891c8b93f9cdee6af544a" name="mysql-connector-java" arch="noarch">
  <version epoch="1" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 1:8.0.16-1" date="1645790400">- Upgrade to 8.0.16
- Fix CVE-2019-2692</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1:8.0.30-1" date="1695729600">- Upgrade to 8.0.30</changelog>
</package>
<package pkgid="ac5c75861394b67040b7163b21b5927945b2d5eabbba5f72cd1e96c1817e14c3" name="mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.oe2203sp1"/>
  <changelog author="maminjie &lt;maminjie1@huawei.com&gt; - 8.0.21-2" date="1600516800">- fix internal compiler error: Segmentation fault</changelog>
  <changelog author="weishengjing &lt;weishengjing1@huawei.com&gt; - 8.0.22-1" date="1606824000">- New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
   CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
   CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
   CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
   CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
   CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
   CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
   CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
   CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
   CVE-2020-14814 CVE-2020-14790 CVE-2020-14809</changelog>
  <changelog author="Shengjing Wei &lt;weishengjing1@huawei.com&gt; - 8.0.22-2" date="1610539200">- Delete useless information</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 8.0.23-1" date="1615377600">- Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
  CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
  CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
  CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
  CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
  CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 8.0.24-1" date="1620475200">- Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
  CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
  CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
  CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
  CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
  CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
  CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
  CVE-2021-2308</changelog>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
</package>
<package pkgid="02a7ebd7a5bda3daf9574914e7c27619096fffc1f85c56ab99e50d68a0f33809" name="mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="2.oe2203sp1"/>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-2" date="1684238400">- Fix CVE-2022-37434</changelog>
</package>
<package pkgid="756b794c1f64865a632004a2a1883482769763ac06d4281dc96c844aeb26ae6e" name="mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0.35" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
</package>
<package pkgid="9079fe10308001e1a20e69761b47538720b9aa8bc5e05f1cee5194d0051b2958" name="mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0.37" rel="1.oe2203sp1"/>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
</package>
<package pkgid="2677fab5ff96364f1a4b5f87b5f932281cf29003fa7ea2f306aafd5a25e619ad" name="mysql-debugsource" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.oe2203sp1"/>
  <changelog author="maminjie &lt;maminjie1@huawei.com&gt; - 8.0.21-2" date="1600516800">- fix internal compiler error: Segmentation fault</changelog>
  <changelog author="weishengjing &lt;weishengjing1@huawei.com&gt; - 8.0.22-1" date="1606824000">- New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
   CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
   CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
   CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
   CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
   CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
   CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
   CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
   CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
   CVE-2020-14814 CVE-2020-14790 CVE-2020-14809</changelog>
  <changelog author="Shengjing Wei &lt;weishengjing1@huawei.com&gt; - 8.0.22-2" date="1610539200">- Delete useless information</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 8.0.23-1" date="1615377600">- Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
  CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
  CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
  CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
  CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
  CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 8.0.24-1" date="1620475200">- Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
  CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
  CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
  CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
  CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
  CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
  CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
  CVE-2021-2308</changelog>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
</package>
<package pkgid="ed95f78d365ade824e9c4ab104b1010beef1e2fcd119dd8554c911657820ee4d" name="mysql-debugsource" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="2.oe2203sp1"/>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-2" date="1684238400">- Fix CVE-2022-37434</changelog>
</package>
<package pkgid="22f8208a56c6212b231120d2520bfb0b6df9552e2a9de2ba6c6bb72c06a3d6eb" name="mysql-debugsource" arch="x86_64">
  <version epoch="0" ver="8.0.35" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
</package>
<package pkgid="f7ef5991ef41ceb8692fa9eb89a5aa68230398fcbb3417ea977c1a3456cf1c56" name="mysql-debugsource" arch="x86_64">
  <version epoch="0" ver="8.0.37" rel="1.oe2203sp1"/>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
</package>
<package pkgid="48b23b1ae87257833eedc5c5c1190139ffe65c38764c54aecde947b7f86c7fca" name="mysql-devel" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.oe2203sp1"/>
  <changelog author="maminjie &lt;maminjie1@huawei.com&gt; - 8.0.21-2" date="1600516800">- fix internal compiler error: Segmentation fault</changelog>
  <changelog author="weishengjing &lt;weishengjing1@huawei.com&gt; - 8.0.22-1" date="1606824000">- New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
   CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
   CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
   CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
   CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
   CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
   CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
   CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
   CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
   CVE-2020-14814 CVE-2020-14790 CVE-2020-14809</changelog>
  <changelog author="Shengjing Wei &lt;weishengjing1@huawei.com&gt; - 8.0.22-2" date="1610539200">- Delete useless information</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 8.0.23-1" date="1615377600">- Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
  CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
  CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
  CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
  CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
  CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 8.0.24-1" date="1620475200">- Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
  CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
  CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
  CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
  CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
  CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
  CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
  CVE-2021-2308</changelog>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
</package>
<package pkgid="ca6185d5f9ab74665b388479e41e661c354262591d19fd3788ddf20e161b39ea" name="mysql-devel" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="2.oe2203sp1"/>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-2" date="1684238400">- Fix CVE-2022-37434</changelog>
</package>
<package pkgid="d0c2fbaeb3568215cde75ffeb8e1506fb40219157dace4aa77abd7902054052f" name="mysql-devel" arch="x86_64">
  <version epoch="0" ver="8.0.35" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
</package>
<package pkgid="46d445984d4c1abb72888fef76786ba8e205ed5482715ab2d092206b98c9cbd2" name="mysql-devel" arch="x86_64">
  <version epoch="0" ver="8.0.37" rel="1.oe2203sp1"/>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
</package>
<package pkgid="56a4ac2130cef60b1620195d940398312b084d5e3b99ef6b387215b4233a215d" name="mysql-errmsg" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.oe2203sp1"/>
  <changelog author="maminjie &lt;maminjie1@huawei.com&gt; - 8.0.21-2" date="1600516800">- fix internal compiler error: Segmentation fault</changelog>
  <changelog author="weishengjing &lt;weishengjing1@huawei.com&gt; - 8.0.22-1" date="1606824000">- New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
   CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
   CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
   CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
   CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
   CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
   CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
   CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
   CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
   CVE-2020-14814 CVE-2020-14790 CVE-2020-14809</changelog>
  <changelog author="Shengjing Wei &lt;weishengjing1@huawei.com&gt; - 8.0.22-2" date="1610539200">- Delete useless information</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 8.0.23-1" date="1615377600">- Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
  CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
  CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
  CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
  CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
  CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 8.0.24-1" date="1620475200">- Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
  CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
  CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
  CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
  CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
  CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
  CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
  CVE-2021-2308</changelog>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
</package>
<package pkgid="183aad2d6419ed11c84bdbaf662f989497e5d2aceda45ba197b6fadf4dfcace7" name="mysql-errmsg" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="2.oe2203sp1"/>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-2" date="1684238400">- Fix CVE-2022-37434</changelog>
</package>
<package pkgid="f2883a3e2e2e1ae8d570ad5c139cdbcc02a83c843eb3d2acdd4413aa98a64847" name="mysql-errmsg" arch="x86_64">
  <version epoch="0" ver="8.0.35" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
</package>
<package pkgid="dd3ddf6ca10de3321799eedc1763ec34e1157d688860e808d538c65b0e1bf7e1" name="mysql-errmsg" arch="x86_64">
  <version epoch="0" ver="8.0.37" rel="1.oe2203sp1"/>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
</package>
<package pkgid="c01eeefec35c49d0c4e59be6138e632a61eaa983d29aac908e31b316ec318a28" name="mysql-help" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.oe2203sp1"/>
  <changelog author="maminjie &lt;maminjie1@huawei.com&gt; - 8.0.21-2" date="1600516800">- fix internal compiler error: Segmentation fault</changelog>
  <changelog author="weishengjing &lt;weishengjing1@huawei.com&gt; - 8.0.22-1" date="1606824000">- New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
   CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
   CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
   CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
   CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
   CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
   CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
   CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
   CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
   CVE-2020-14814 CVE-2020-14790 CVE-2020-14809</changelog>
  <changelog author="Shengjing Wei &lt;weishengjing1@huawei.com&gt; - 8.0.22-2" date="1610539200">- Delete useless information</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 8.0.23-1" date="1615377600">- Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
  CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
  CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
  CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
  CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
  CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 8.0.24-1" date="1620475200">- Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
  CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
  CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
  CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
  CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
  CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
  CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
  CVE-2021-2308</changelog>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
</package>
<package pkgid="cb289fe154d9a1d1798c661a020de507ef554a9d96bca7d8b63025efa0d458de" name="mysql-help" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="2.oe2203sp1"/>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-2" date="1684238400">- Fix CVE-2022-37434</changelog>
</package>
<package pkgid="21b1f3abc0dc66fd71ca22bd58b90094342a67bcf9837c73bb7c0b3a28a3e932" name="mysql-help" arch="x86_64">
  <version epoch="0" ver="8.0.35" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
</package>
<package pkgid="33613b4045ee043b424cf956da83f8b6b39667078a15e0091c7b0af2d90a4892" name="mysql-help" arch="x86_64">
  <version epoch="0" ver="8.0.37" rel="1.oe2203sp1"/>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
</package>
<package pkgid="959f87e2165bcd57c094268561961913f74bf72fe2ba695515da5ea55d9a133f" name="mysql-libs" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.oe2203sp1"/>
  <changelog author="maminjie &lt;maminjie1@huawei.com&gt; - 8.0.21-2" date="1600516800">- fix internal compiler error: Segmentation fault</changelog>
  <changelog author="weishengjing &lt;weishengjing1@huawei.com&gt; - 8.0.22-1" date="1606824000">- New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
   CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
   CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
   CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
   CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
   CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
   CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
   CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
   CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
   CVE-2020-14814 CVE-2020-14790 CVE-2020-14809</changelog>
  <changelog author="Shengjing Wei &lt;weishengjing1@huawei.com&gt; - 8.0.22-2" date="1610539200">- Delete useless information</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 8.0.23-1" date="1615377600">- Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
  CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
  CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
  CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
  CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
  CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 8.0.24-1" date="1620475200">- Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
  CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
  CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
  CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
  CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
  CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
  CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
  CVE-2021-2308</changelog>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
</package>
<package pkgid="140d34f2cd527cf0e3bbf2321ed2a0ba22f9dfa4ea47a24b819d73680ab3e7e2" name="mysql-libs" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="2.oe2203sp1"/>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-2" date="1684238400">- Fix CVE-2022-37434</changelog>
</package>
<package pkgid="f5f5a8b5bdd692fde2cf5e6ef0e73968700e7b3975e80dc0d86b2453650fed32" name="mysql-libs" arch="x86_64">
  <version epoch="0" ver="8.0.35" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
</package>
<package pkgid="86dc98959d88cc999366ac0f6a8fa5820e59dc3b48dd18056fece18ca0d0b950" name="mysql-libs" arch="x86_64">
  <version epoch="0" ver="8.0.37" rel="1.oe2203sp1"/>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
</package>
<package pkgid="660fbc99495c05e0dc524c57f70e07fd4ec5dc627111c5b9fff2d8472c25f912" name="mysql-server" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.oe2203sp1"/>
  <changelog author="maminjie &lt;maminjie1@huawei.com&gt; - 8.0.21-2" date="1600516800">- fix internal compiler error: Segmentation fault</changelog>
  <changelog author="weishengjing &lt;weishengjing1@huawei.com&gt; - 8.0.22-1" date="1606824000">- New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
   CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
   CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
   CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
   CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
   CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
   CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
   CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
   CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
   CVE-2020-14814 CVE-2020-14790 CVE-2020-14809</changelog>
  <changelog author="Shengjing Wei &lt;weishengjing1@huawei.com&gt; - 8.0.22-2" date="1610539200">- Delete useless information</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 8.0.23-1" date="1615377600">- Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
  CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
  CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
  CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
  CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
  CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 8.0.24-1" date="1620475200">- Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
  CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
  CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
  CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
  CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
  CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
  CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
  CVE-2021-2308</changelog>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
</package>
<package pkgid="8c3bee1ea76b969a5005f692664c0a5d0ea0a619867ccfcde8ed2ad7b08099d7" name="mysql-server" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="2.oe2203sp1"/>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-2" date="1684238400">- Fix CVE-2022-37434</changelog>
</package>
<package pkgid="036742ccdf0311516d06353f4b91f543e17698c617c566bfba7ff403991b4e6c" name="mysql-server" arch="x86_64">
  <version epoch="0" ver="8.0.35" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
</package>
<package pkgid="f344e604fd3b724ae6d3c451b507f5bf0dbf7813854a0034355b53780127b67a" name="mysql-server" arch="x86_64">
  <version epoch="0" ver="8.0.37" rel="1.oe2203sp1"/>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
</package>
<package pkgid="876aa7ae869264f8ffb0331599499cbb23a4860876bfa48924e50910a816ca83" name="mysql-test" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.oe2203sp1"/>
  <changelog author="maminjie &lt;maminjie1@huawei.com&gt; - 8.0.21-2" date="1600516800">- fix internal compiler error: Segmentation fault</changelog>
  <changelog author="weishengjing &lt;weishengjing1@huawei.com&gt; - 8.0.22-1" date="1606824000">- New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
   CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
   CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
   CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
   CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
   CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
   CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
   CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
   CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
   CVE-2020-14814 CVE-2020-14790 CVE-2020-14809</changelog>
  <changelog author="Shengjing Wei &lt;weishengjing1@huawei.com&gt; - 8.0.22-2" date="1610539200">- Delete useless information</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 8.0.23-1" date="1615377600">- Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
  CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
  CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
  CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
  CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
  CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 8.0.24-1" date="1620475200">- Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
  CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
  CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
  CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
  CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
  CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
  CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
  CVE-2021-2308</changelog>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
</package>
<package pkgid="0e162dede909d6fd81110fd0f970c49e7eccbb713a2f5c1219ff7a7f1a59ad19" name="mysql-test" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="2.oe2203sp1"/>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-2" date="1684238400">- Fix CVE-2022-37434</changelog>
</package>
<package pkgid="ff0e0b4632cae9ea0c37712b25f4290568e6b87c7aa5f4a7b97fe39947654d1c" name="mysql-test" arch="x86_64">
  <version epoch="0" ver="8.0.35" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
</package>
<package pkgid="82006ff96165fe01025bc2f7d1fa4a24fa5ec49a92d98b2dc24bb162b26d2e9f" name="mysql-test" arch="x86_64">
  <version epoch="0" ver="8.0.37" rel="1.oe2203sp1"/>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
</package>
<package pkgid="2f23de6f009c66cec58119fa463ad8969154e4caf09a8da29af62556f1bfa491" name="nasm" arch="x86_64">
  <version epoch="0" ver="2.15.05" rel="5.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.15.05-2" date="1638014400">- enable make check</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 2.15.05-3" date="1666440000">- add version number for Obsoletes
- fix bogus date in changelog</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 2.15.05-4" date="1674129600">- Fix help info error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.15.05-5" date="1681300800">- Fix CVE-2022-44370</changelog>
</package>
<package pkgid="eb779f8b6ba97ae29bb73cca91786fc0c47ecc57ef99a34ded0509a2f360b410" name="nasm" arch="x86_64">
  <version epoch="0" ver="2.15.05" rel="6.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.15.05-2" date="1638014400">- enable make check</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 2.15.05-3" date="1666440000">- add version number for Obsoletes
- fix bogus date in changelog</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 2.15.05-4" date="1674129600">- Fix help info error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.15.05-5" date="1681300800">- Fix CVE-2022-44370</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 2.15.05-6" date="1692792000">- Fix CVE-2020-21528</changelog>
</package>
<package pkgid="49c859c641fe7d120592b20d65caf264f0d698956884a53bcdd3051fc6f80a97" name="nasm-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.15.05" rel="5.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.15.05-2" date="1638014400">- enable make check</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 2.15.05-3" date="1666440000">- add version number for Obsoletes
- fix bogus date in changelog</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 2.15.05-4" date="1674129600">- Fix help info error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.15.05-5" date="1681300800">- Fix CVE-2022-44370</changelog>
</package>
<package pkgid="1e11148b6e277e3c6a89cefef72b15ca59b67305ecf96c47b6fb7fc3b8818955" name="nasm-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.15.05" rel="6.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.15.05-2" date="1638014400">- enable make check</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 2.15.05-3" date="1666440000">- add version number for Obsoletes
- fix bogus date in changelog</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 2.15.05-4" date="1674129600">- Fix help info error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.15.05-5" date="1681300800">- Fix CVE-2022-44370</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 2.15.05-6" date="1692792000">- Fix CVE-2020-21528</changelog>
</package>
<package pkgid="fb34baead47b6e47f0060d63407bf2a69c5b006a09fd074687e3b2bf0c031664" name="nasm-debugsource" arch="x86_64">
  <version epoch="0" ver="2.15.05" rel="5.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.15.05-2" date="1638014400">- enable make check</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 2.15.05-3" date="1666440000">- add version number for Obsoletes
- fix bogus date in changelog</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 2.15.05-4" date="1674129600">- Fix help info error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.15.05-5" date="1681300800">- Fix CVE-2022-44370</changelog>
</package>
<package pkgid="c55f44ece8eeebda359beacd7e4561bce5070d263d1d2e8b1f27319c968fe03b" name="nasm-debugsource" arch="x86_64">
  <version epoch="0" ver="2.15.05" rel="6.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.15.05-2" date="1638014400">- enable make check</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 2.15.05-3" date="1666440000">- add version number for Obsoletes
- fix bogus date in changelog</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 2.15.05-4" date="1674129600">- Fix help info error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.15.05-5" date="1681300800">- Fix CVE-2022-44370</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 2.15.05-6" date="1692792000">- Fix CVE-2020-21528</changelog>
</package>
<package pkgid="60a6804ec0a9946ae16d115d781d61ba1c69580e4a96f159fd27e36d706881b2" name="nasm-help" arch="noarch">
  <version epoch="0" ver="2.15.05" rel="5.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.15.05-2" date="1638014400">- enable make check</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 2.15.05-3" date="1666440000">- add version number for Obsoletes
- fix bogus date in changelog</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 2.15.05-4" date="1674129600">- Fix help info error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.15.05-5" date="1681300800">- Fix CVE-2022-44370</changelog>
</package>
<package pkgid="7f570db8d9f3d4b3f9d8ec6b4f92314ed840a09e676692a165c5ff9003268646" name="nasm-help" arch="noarch">
  <version epoch="0" ver="2.15.05" rel="6.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.15.05-2" date="1638014400">- enable make check</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 2.15.05-3" date="1666440000">- add version number for Obsoletes
- fix bogus date in changelog</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 2.15.05-4" date="1674129600">- Fix help info error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.15.05-5" date="1681300800">- Fix CVE-2022-44370</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 2.15.05-6" date="1692792000">- Fix CVE-2020-21528</changelog>
</package>
<package pkgid="e6ca7ec665e2dc79702721f72775a7533963a09795280c37dd34c24021e42b8e" name="nautilus" arch="x86_64">
  <version epoch="0" ver="3.38.2" rel="2.oe2203sp1"/>
  <changelog author="technology208 &lt;technology@208suo.com&gt;  - 3.38.2-2" date="1716206400">Fix crash when copying an invalid file</changelog>
</package>
<package pkgid="9058546967a74b2015e9b0cafd15b8c34346ee871898a00e3c476e85a1358701" name="nautilus-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.38.2" rel="2.oe2203sp1"/>
  <changelog author="technology208 &lt;technology@208suo.com&gt;  - 3.38.2-2" date="1716206400">Fix crash when copying an invalid file</changelog>
</package>
<package pkgid="92917c22b52a0c0a1b9e90250553ca3777ae1238ceba1aa5a30967671515a0c9" name="nautilus-debugsource" arch="x86_64">
  <version epoch="0" ver="3.38.2" rel="2.oe2203sp1"/>
  <changelog author="technology208 &lt;technology@208suo.com&gt;  - 3.38.2-2" date="1716206400">Fix crash when copying an invalid file</changelog>
</package>
<package pkgid="6c386472df8ea1fea6d8f5681bf028c3d59eab019c953add6087d8f512ce4aa2" name="nautilus-devel" arch="x86_64">
  <version epoch="0" ver="3.38.2" rel="2.oe2203sp1"/>
  <changelog author="technology208 &lt;technology@208suo.com&gt;  - 3.38.2-2" date="1716206400">Fix crash when copying an invalid file</changelog>
</package>
<package pkgid="49b46574e12c016d0d68defd48f4650a31bbee361fdf14f067f5474452f18363" name="nautilus-help" arch="noarch">
  <version epoch="0" ver="3.38.2" rel="2.oe2203sp1"/>
  <changelog author="technology208 &lt;technology@208suo.com&gt;  - 3.38.2-2" date="1716206400">Fix crash when copying an invalid file</changelog>
</package>
<package pkgid="0cd1a0f15912f243670c7c832159c10062aa3f6a796cd05b829dc7924a7e7893" name="ncurses" arch="x86_64">
  <version epoch="0" ver="6.3" rel="10.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-10" date="1706616000">- Type:CVE
- CVE:CVE-2023-45918
- SUG:NA
- DESC:fix CVE-2023-45918</changelog>
</package>
<package pkgid="ab2a3e8ee8e68884227541f702bcb3a5db92ed8700816f268e8cdc48d8e4b2c6" name="ncurses" arch="x86_64">
  <version epoch="0" ver="6.3" rel="8.oe2203sp1"/>
  <changelog author="zhuyan &lt;zhuyan34@huawei.com&gt; - 6.2-2" date="1632398400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:correct the source of ncurses</changelog>
  <changelog author="xihaochen&lt;xihaochen@huawei.com&gt; - 6.2-3" date="1634040000">- Type:CVE
- CVE:CVE-2021-39537
- SUG:NA
- DESC:fix CVE-2021-39537</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
</package>
<package pkgid="d7021cf6cc8fbb4d2ec1aed6d293d150bff7eb6bcbfc9b1ba6d7465f2bc9375c" name="ncurses" arch="x86_64">
  <version epoch="0" ver="6.3" rel="9.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
</package>
<package pkgid="9133a54c90f08942cc3a88fa7fc18e64b85321138fd862a263d71608e70e7029" name="ncurses-base" arch="noarch">
  <version epoch="0" ver="6.3" rel="10.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-10" date="1706616000">- Type:CVE
- CVE:CVE-2023-45918
- SUG:NA
- DESC:fix CVE-2023-45918</changelog>
</package>
<package pkgid="f59d873d958809262ca029f084b3455ead2a9a8edff53a035cb8832db1a3940b" name="ncurses-base" arch="noarch">
  <version epoch="0" ver="6.3" rel="8.oe2203sp1"/>
  <changelog author="zhuyan &lt;zhuyan34@huawei.com&gt; - 6.2-2" date="1632398400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:correct the source of ncurses</changelog>
  <changelog author="xihaochen&lt;xihaochen@huawei.com&gt; - 6.2-3" date="1634040000">- Type:CVE
- CVE:CVE-2021-39537
- SUG:NA
- DESC:fix CVE-2021-39537</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
</package>
<package pkgid="a4ee7a442d4a93ee9bf056a4dd3d1b5accc29be30ef810a36a6913decd627755" name="ncurses-base" arch="noarch">
  <version epoch="0" ver="6.3" rel="9.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
</package>
<package pkgid="b0aec42a979e06b386c17c791cb677abf0ac6d79a95670b01723c1b37da1cb7b" name="ncurses-compat-libs" arch="x86_64">
  <version epoch="0" ver="6.3" rel="10.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-10" date="1706616000">- Type:CVE
- CVE:CVE-2023-45918
- SUG:NA
- DESC:fix CVE-2023-45918</changelog>
</package>
<package pkgid="79dfb5533e685c935aac68c31f7f547ed1912bccad1263455f11a483a90d2ad5" name="ncurses-compat-libs" arch="x86_64">
  <version epoch="0" ver="6.3" rel="8.oe2203sp1"/>
  <changelog author="zhuyan &lt;zhuyan34@huawei.com&gt; - 6.2-2" date="1632398400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:correct the source of ncurses</changelog>
  <changelog author="xihaochen&lt;xihaochen@huawei.com&gt; - 6.2-3" date="1634040000">- Type:CVE
- CVE:CVE-2021-39537
- SUG:NA
- DESC:fix CVE-2021-39537</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
</package>
<package pkgid="f4939018fcd5e5146817c5ef1ee01dbd81dc1081baa146e71750b500e27ed637" name="ncurses-compat-libs" arch="x86_64">
  <version epoch="0" ver="6.3" rel="9.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
</package>
<package pkgid="ae062165dc7e9acdb668d723a85395427d70beae98a70b18efd4c932c6e8ea86" name="ncurses-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.3" rel="10.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-10" date="1706616000">- Type:CVE
- CVE:CVE-2023-45918
- SUG:NA
- DESC:fix CVE-2023-45918</changelog>
</package>
<package pkgid="2e5a7890508f1dcfd3b22b9bbc85b5dc1a078a61c0a07d1bf2ac6a29393803de" name="ncurses-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.3" rel="8.oe2203sp1"/>
  <changelog author="zhuyan &lt;zhuyan34@huawei.com&gt; - 6.2-2" date="1632398400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:correct the source of ncurses</changelog>
  <changelog author="xihaochen&lt;xihaochen@huawei.com&gt; - 6.2-3" date="1634040000">- Type:CVE
- CVE:CVE-2021-39537
- SUG:NA
- DESC:fix CVE-2021-39537</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
</package>
<package pkgid="75699957c1e91c40b20539522c14b859f6d7f49ff7c97c8b206738340b75e487" name="ncurses-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.3" rel="9.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
</package>
<package pkgid="506110ea6e16c7390bab5349e13ce49f9bb80402bee739249bfd9bb55a19735d" name="ncurses-debugsource" arch="x86_64">
  <version epoch="0" ver="6.3" rel="10.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-10" date="1706616000">- Type:CVE
- CVE:CVE-2023-45918
- SUG:NA
- DESC:fix CVE-2023-45918</changelog>
</package>
<package pkgid="716859092ce0e0e4150a582c06e17571cf6a14a25e7df328aaeb9ef863af73c1" name="ncurses-debugsource" arch="x86_64">
  <version epoch="0" ver="6.3" rel="8.oe2203sp1"/>
  <changelog author="zhuyan &lt;zhuyan34@huawei.com&gt; - 6.2-2" date="1632398400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:correct the source of ncurses</changelog>
  <changelog author="xihaochen&lt;xihaochen@huawei.com&gt; - 6.2-3" date="1634040000">- Type:CVE
- CVE:CVE-2021-39537
- SUG:NA
- DESC:fix CVE-2021-39537</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
</package>
<package pkgid="1de9aab2ae1ce5b17dcb2821c4acbeb27202a0e19e7e70a5f3fb2bb69e4eedd5" name="ncurses-debugsource" arch="x86_64">
  <version epoch="0" ver="6.3" rel="9.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
</package>
<package pkgid="eb3e7e6883f3fd9c529a03a9c09c2e3e7363ced03b55664e024bc28e8f9f827d" name="ncurses-devel" arch="x86_64">
  <version epoch="0" ver="6.3" rel="10.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-10" date="1706616000">- Type:CVE
- CVE:CVE-2023-45918
- SUG:NA
- DESC:fix CVE-2023-45918</changelog>
</package>
<package pkgid="e8d298b9eeaf5ac2e18660f242374244407bb04e45593bf44851a6aa8f03aebc" name="ncurses-devel" arch="x86_64">
  <version epoch="0" ver="6.3" rel="8.oe2203sp1"/>
  <changelog author="zhuyan &lt;zhuyan34@huawei.com&gt; - 6.2-2" date="1632398400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:correct the source of ncurses</changelog>
  <changelog author="xihaochen&lt;xihaochen@huawei.com&gt; - 6.2-3" date="1634040000">- Type:CVE
- CVE:CVE-2021-39537
- SUG:NA
- DESC:fix CVE-2021-39537</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
</package>
<package pkgid="3c45c01ce30c1bdf0c1fb6b09ca380e3f5be22837087f90658c8296aca47ebb7" name="ncurses-devel" arch="x86_64">
  <version epoch="0" ver="6.3" rel="9.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
</package>
<package pkgid="db90776f3ee9c431ade10f61175a90851cd70de9d20308d4cfbb1ace016cb234" name="ncurses-help" arch="x86_64">
  <version epoch="0" ver="6.3" rel="10.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-10" date="1706616000">- Type:CVE
- CVE:CVE-2023-45918
- SUG:NA
- DESC:fix CVE-2023-45918</changelog>
</package>
<package pkgid="3596d89d15d7d79ba6a65d930fbc2ee7665ac97458ca22c6ee2a27de1e6a5f81" name="ncurses-help" arch="x86_64">
  <version epoch="0" ver="6.3" rel="8.oe2203sp1"/>
  <changelog author="zhuyan &lt;zhuyan34@huawei.com&gt; - 6.2-2" date="1632398400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:correct the source of ncurses</changelog>
  <changelog author="xihaochen&lt;xihaochen@huawei.com&gt; - 6.2-3" date="1634040000">- Type:CVE
- CVE:CVE-2021-39537
- SUG:NA
- DESC:fix CVE-2021-39537</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
</package>
<package pkgid="269bfa1ff255ca5c1f040df3f5d25a048f0a7d0bb7c3a43c249fc2b008d3c812" name="ncurses-help" arch="x86_64">
  <version epoch="0" ver="6.3" rel="9.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
</package>
<package pkgid="cfa901d4fb8cb0ba81472942aba0d1c374134c77ad9f99f07103efe3b566487a" name="ncurses-libs" arch="x86_64">
  <version epoch="0" ver="6.3" rel="10.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-10" date="1706616000">- Type:CVE
- CVE:CVE-2023-45918
- SUG:NA
- DESC:fix CVE-2023-45918</changelog>
</package>
<package pkgid="42d30dd899e00aa01f8f3d7d4d739fe98e83d841ec7389c1545285dd6ff05957" name="ncurses-libs" arch="x86_64">
  <version epoch="0" ver="6.3" rel="8.oe2203sp1"/>
  <changelog author="zhuyan &lt;zhuyan34@huawei.com&gt; - 6.2-2" date="1632398400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:correct the source of ncurses</changelog>
  <changelog author="xihaochen&lt;xihaochen@huawei.com&gt; - 6.2-3" date="1634040000">- Type:CVE
- CVE:CVE-2021-39537
- SUG:NA
- DESC:fix CVE-2021-39537</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
</package>
<package pkgid="d75a47323a4c825e8ea4d3aa07b01c3418bc1f579e4cdbbd8201c3ff537d94e3" name="ncurses-libs" arch="x86_64">
  <version epoch="0" ver="6.3" rel="9.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
</package>
<package pkgid="c02bc505f9e7eea1ddac82abe5640d2137a1b1c7cc458c26e1a9ec70b6399420" name="ncurses-static" arch="x86_64">
  <version epoch="0" ver="6.3" rel="10.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-10" date="1706616000">- Type:CVE
- CVE:CVE-2023-45918
- SUG:NA
- DESC:fix CVE-2023-45918</changelog>
</package>
<package pkgid="488a48078f450d5bd28dde1cb760257323645f30d0c7691b7cde56c8e3bf38f1" name="ncurses-static" arch="x86_64">
  <version epoch="0" ver="6.3" rel="8.oe2203sp1"/>
  <changelog author="zhuyan &lt;zhuyan34@huawei.com&gt; - 6.2-2" date="1632398400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:correct the source of ncurses</changelog>
  <changelog author="xihaochen&lt;xihaochen@huawei.com&gt; - 6.2-3" date="1634040000">- Type:CVE
- CVE:CVE-2021-39537
- SUG:NA
- DESC:fix CVE-2021-39537</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
</package>
<package pkgid="b5c45f6572ae422b88d0013d901c031222dd35a0cf86d2326c7f5bde434c8789" name="ncurses-static" arch="x86_64">
  <version epoch="0" ver="6.3" rel="9.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
</package>
<package pkgid="bfbeaa1f1b4c452e2bc8b081f97014accfabe7dfc1b3e472becefb845ad88533" name="net-snmp" arch="x86_64">
  <version epoch="1" ver="5.9.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.8-15" date="1631880000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix undefined behavior in asn_build_int()
       libsnmp: Rework parse_imports()
       libsnmp: Increase MAX_IMPORTS
       libsnmp: Allocate the module import list on the heap
       libsnmp: Fix a memory leak in a MIB parser error path
       libsnmp: Fix the getoid() error path</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.9.1-1" date="1639656000">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:update net-snmp to 5.9.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-2" date="1659960000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error which occasionally happened</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-3" date="1661601600">- Type:CVE
- CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
- SUG:NA
- DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
           CVE-2022-24808 CVE-2022-24809 CVE-2022-24810</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1:5.9.1-4" date="1664539200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
        IF-MIB: pass the network interface index to net
        IF-MIB: fix a memory leak
        IF-MIB: fix a recently introduced use after free
        IF-MIB: add a trailing newline to an error message</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-5" date="1672401600">- Type:CVE
- CVE:CVE-2022-44792 CVE-2022-44793
- SUG:NA
- DESC:fix CVE-2022-44792 CVE-2022-44793</changelog>
</package>
<package pkgid="4dff028bf7a2276fffd60679b744b8ee80a64ff2f5c505ff9763e24f3f733d83" name="net-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.9.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.8-15" date="1631880000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix undefined behavior in asn_build_int()
       libsnmp: Rework parse_imports()
       libsnmp: Increase MAX_IMPORTS
       libsnmp: Allocate the module import list on the heap
       libsnmp: Fix a memory leak in a MIB parser error path
       libsnmp: Fix the getoid() error path</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.9.1-1" date="1639656000">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:update net-snmp to 5.9.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-2" date="1659960000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error which occasionally happened</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-3" date="1661601600">- Type:CVE
- CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
- SUG:NA
- DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
           CVE-2022-24808 CVE-2022-24809 CVE-2022-24810</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1:5.9.1-4" date="1664539200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
        IF-MIB: pass the network interface index to net
        IF-MIB: fix a memory leak
        IF-MIB: fix a recently introduced use after free
        IF-MIB: add a trailing newline to an error message</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-5" date="1672401600">- Type:CVE
- CVE:CVE-2022-44792 CVE-2022-44793
- SUG:NA
- DESC:fix CVE-2022-44792 CVE-2022-44793</changelog>
</package>
<package pkgid="8de212b4812fba5bfa335a78118cb38fa449616998e5f80d9d31120748633083" name="net-snmp-debugsource" arch="x86_64">
  <version epoch="1" ver="5.9.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.8-15" date="1631880000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix undefined behavior in asn_build_int()
       libsnmp: Rework parse_imports()
       libsnmp: Increase MAX_IMPORTS
       libsnmp: Allocate the module import list on the heap
       libsnmp: Fix a memory leak in a MIB parser error path
       libsnmp: Fix the getoid() error path</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.9.1-1" date="1639656000">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:update net-snmp to 5.9.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-2" date="1659960000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error which occasionally happened</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-3" date="1661601600">- Type:CVE
- CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
- SUG:NA
- DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
           CVE-2022-24808 CVE-2022-24809 CVE-2022-24810</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1:5.9.1-4" date="1664539200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
        IF-MIB: pass the network interface index to net
        IF-MIB: fix a memory leak
        IF-MIB: fix a recently introduced use after free
        IF-MIB: add a trailing newline to an error message</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-5" date="1672401600">- Type:CVE
- CVE:CVE-2022-44792 CVE-2022-44793
- SUG:NA
- DESC:fix CVE-2022-44792 CVE-2022-44793</changelog>
</package>
<package pkgid="2fdc6f9034117890ae3ac28c5e0967f874efcb1a37c482156a8fef69e6de5475" name="net-snmp-devel" arch="x86_64">
  <version epoch="1" ver="5.9.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.8-15" date="1631880000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix undefined behavior in asn_build_int()
       libsnmp: Rework parse_imports()
       libsnmp: Increase MAX_IMPORTS
       libsnmp: Allocate the module import list on the heap
       libsnmp: Fix a memory leak in a MIB parser error path
       libsnmp: Fix the getoid() error path</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.9.1-1" date="1639656000">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:update net-snmp to 5.9.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-2" date="1659960000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error which occasionally happened</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-3" date="1661601600">- Type:CVE
- CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
- SUG:NA
- DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
           CVE-2022-24808 CVE-2022-24809 CVE-2022-24810</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1:5.9.1-4" date="1664539200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
        IF-MIB: pass the network interface index to net
        IF-MIB: fix a memory leak
        IF-MIB: fix a recently introduced use after free
        IF-MIB: add a trailing newline to an error message</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-5" date="1672401600">- Type:CVE
- CVE:CVE-2022-44792 CVE-2022-44793
- SUG:NA
- DESC:fix CVE-2022-44792 CVE-2022-44793</changelog>
</package>
<package pkgid="c442883bedd64138ccb5f902e7fa3c438b84abb46a5d6905ddf7a1fa020224ac" name="net-snmp-gui" arch="x86_64">
  <version epoch="1" ver="5.9.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.8-15" date="1631880000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix undefined behavior in asn_build_int()
       libsnmp: Rework parse_imports()
       libsnmp: Increase MAX_IMPORTS
       libsnmp: Allocate the module import list on the heap
       libsnmp: Fix a memory leak in a MIB parser error path
       libsnmp: Fix the getoid() error path</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.9.1-1" date="1639656000">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:update net-snmp to 5.9.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-2" date="1659960000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error which occasionally happened</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-3" date="1661601600">- Type:CVE
- CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
- SUG:NA
- DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
           CVE-2022-24808 CVE-2022-24809 CVE-2022-24810</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1:5.9.1-4" date="1664539200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
        IF-MIB: pass the network interface index to net
        IF-MIB: fix a memory leak
        IF-MIB: fix a recently introduced use after free
        IF-MIB: add a trailing newline to an error message</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-5" date="1672401600">- Type:CVE
- CVE:CVE-2022-44792 CVE-2022-44793
- SUG:NA
- DESC:fix CVE-2022-44792 CVE-2022-44793</changelog>
</package>
<package pkgid="b613f974a33af0fa7e84e046df38d12490e02c9c517594d57464576097a7a970" name="net-snmp-help" arch="noarch">
  <version epoch="1" ver="5.9.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.8-15" date="1631880000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix undefined behavior in asn_build_int()
       libsnmp: Rework parse_imports()
       libsnmp: Increase MAX_IMPORTS
       libsnmp: Allocate the module import list on the heap
       libsnmp: Fix a memory leak in a MIB parser error path
       libsnmp: Fix the getoid() error path</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.9.1-1" date="1639656000">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:update net-snmp to 5.9.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-2" date="1659960000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error which occasionally happened</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-3" date="1661601600">- Type:CVE
- CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
- SUG:NA
- DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
           CVE-2022-24808 CVE-2022-24809 CVE-2022-24810</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1:5.9.1-4" date="1664539200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
        IF-MIB: pass the network interface index to net
        IF-MIB: fix a memory leak
        IF-MIB: fix a recently introduced use after free
        IF-MIB: add a trailing newline to an error message</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-5" date="1672401600">- Type:CVE
- CVE:CVE-2022-44792 CVE-2022-44793
- SUG:NA
- DESC:fix CVE-2022-44792 CVE-2022-44793</changelog>
</package>
<package pkgid="5e7f5a94ef0cb00dab3f4a8378202b62710c69fc01d21338bef64bc101f6db25" name="net-snmp-libs" arch="x86_64">
  <version epoch="1" ver="5.9.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.8-15" date="1631880000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix undefined behavior in asn_build_int()
       libsnmp: Rework parse_imports()
       libsnmp: Increase MAX_IMPORTS
       libsnmp: Allocate the module import list on the heap
       libsnmp: Fix a memory leak in a MIB parser error path
       libsnmp: Fix the getoid() error path</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.9.1-1" date="1639656000">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:update net-snmp to 5.9.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-2" date="1659960000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error which occasionally happened</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-3" date="1661601600">- Type:CVE
- CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
- SUG:NA
- DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
           CVE-2022-24808 CVE-2022-24809 CVE-2022-24810</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1:5.9.1-4" date="1664539200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
        IF-MIB: pass the network interface index to net
        IF-MIB: fix a memory leak
        IF-MIB: fix a recently introduced use after free
        IF-MIB: add a trailing newline to an error message</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-5" date="1672401600">- Type:CVE
- CVE:CVE-2022-44792 CVE-2022-44793
- SUG:NA
- DESC:fix CVE-2022-44792 CVE-2022-44793</changelog>
</package>
<package pkgid="cb0793403f2e9c3b363b02a6beaab7f2d256eb57fcdf68789436fbdda29c8fb0" name="net-snmp-perl" arch="x86_64">
  <version epoch="1" ver="5.9.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.8-15" date="1631880000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix undefined behavior in asn_build_int()
       libsnmp: Rework parse_imports()
       libsnmp: Increase MAX_IMPORTS
       libsnmp: Allocate the module import list on the heap
       libsnmp: Fix a memory leak in a MIB parser error path
       libsnmp: Fix the getoid() error path</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.9.1-1" date="1639656000">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:update net-snmp to 5.9.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-2" date="1659960000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error which occasionally happened</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-3" date="1661601600">- Type:CVE
- CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
- SUG:NA
- DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
           CVE-2022-24808 CVE-2022-24809 CVE-2022-24810</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1:5.9.1-4" date="1664539200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
        IF-MIB: pass the network interface index to net
        IF-MIB: fix a memory leak
        IF-MIB: fix a recently introduced use after free
        IF-MIB: add a trailing newline to an error message</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-5" date="1672401600">- Type:CVE
- CVE:CVE-2022-44792 CVE-2022-44793
- SUG:NA
- DESC:fix CVE-2022-44792 CVE-2022-44793</changelog>
</package>
<package pkgid="3f03e6ef28149f7e56f3b80ddc03074d633db52917aec587559ec65ae4cad3aa" name="netconsole-service" arch="noarch">
  <version epoch="0" ver="10.17" rel="2.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 10.06-2" date="1627905600">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 10.12-1" date="1640001600">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update initscripts to 10.12</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
</package>
<package pkgid="e1de055315ba8be8c859bcb07810222304e2adbeec6cb319891f51dd4323ddb8" name="netty" arch="x86_64">
  <version epoch="0" ver="4.1.13" rel="21.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 4.1.13-16" date="1639742400">- Fix CVE-2021-43797</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 4.1.13-17" date="1640347200">- This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 4.1.13-18" date="1646654400">- Remove lz4-java dependency</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 4.1.13-19" date="1667995200">- Change source</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 4.1.13-20" date="1678017600">- Add strip</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.1.13-21" date="1702468800">- Fix CVE-2022-41881</changelog>
</package>
<package pkgid="c525d9e5881a1917127e19350bba6be1863b3a1dfe15d8f281b0af219ef18ef5" name="netty-help" arch="noarch">
  <version epoch="0" ver="4.1.13" rel="21.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 4.1.13-16" date="1639742400">- Fix CVE-2021-43797</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 4.1.13-17" date="1640347200">- This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 4.1.13-18" date="1646654400">- Remove lz4-java dependency</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 4.1.13-19" date="1667995200">- Change source</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 4.1.13-20" date="1678017600">- Add strip</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.1.13-21" date="1702468800">- Fix CVE-2022-41881</changelog>
</package>
<package pkgid="64a30bbe5ab381f4ec537e02d785872b053d52cf22d5f5a7f00624968366bf8b" name="network-scripts" arch="x86_64">
  <version epoch="0" ver="10.17" rel="2.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 10.06-2" date="1627905600">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 10.12-1" date="1640001600">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update initscripts to 10.12</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
</package>
<package pkgid="38cc45b90a86fc30ea0ea29fa9089dc9561d7c329fdaf7163deedfd6cb312ac9" name="network-scripts-teamd" arch="x86_64">
  <version epoch="0" ver="1.31" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.31-2" date="1662638400">- fix error options in doc</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.31-3" date="1695297600">- fix an issue about teamd is using 100% cpu usage (of 1 core)</changelog>
</package>
<package pkgid="56955baced37ab89a337e48987feef0d81c262c692432e8efa803e8698fc7cf1" name="newt" arch="x86_64">
  <version epoch="0" ver="0.52.21" rel="9.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-6" date="1651147200">- Type:requirement
- Id:NA
- SUG:NA
- DESC:rebuild package</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-7" date="1666267200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix warnings about never-read values</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-8" date="1675771200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:delete a static library file</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-9" date="1676030400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="50d261db9c6884cf594e98803d8e7c08fc0020bdba29beb98d3347621acb2ac7" name="newt-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.52.21" rel="9.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-6" date="1651147200">- Type:requirement
- Id:NA
- SUG:NA
- DESC:rebuild package</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-7" date="1666267200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix warnings about never-read values</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-8" date="1675771200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:delete a static library file</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-9" date="1676030400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="17bd08bf98151ff5830a2a25193261490b7a5a69617dd682089a17ec65ec5c7a" name="newt-debugsource" arch="x86_64">
  <version epoch="0" ver="0.52.21" rel="9.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-6" date="1651147200">- Type:requirement
- Id:NA
- SUG:NA
- DESC:rebuild package</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-7" date="1666267200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix warnings about never-read values</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-8" date="1675771200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:delete a static library file</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-9" date="1676030400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="72ba8d85d788f66ab9bbbbcf9048b52c93b002b2eb456195ead2b2ea448ea409" name="newt-devel" arch="x86_64">
  <version epoch="0" ver="0.52.21" rel="9.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-6" date="1651147200">- Type:requirement
- Id:NA
- SUG:NA
- DESC:rebuild package</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-7" date="1666267200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix warnings about never-read values</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-8" date="1675771200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:delete a static library file</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-9" date="1676030400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="bb1f92b3f62009a2f156e89a62d6e29868ef1962ae43f393365bee7d21981c1b" name="newt-help" arch="noarch">
  <version epoch="0" ver="0.52.21" rel="9.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-6" date="1651147200">- Type:requirement
- Id:NA
- SUG:NA
- DESC:rebuild package</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-7" date="1666267200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix warnings about never-read values</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-8" date="1675771200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:delete a static library file</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-9" date="1676030400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="783ec7e102aab033e7d68eed9dc9fb1e63f92ca4ff3263963a819d56954fe2a3" name="nghttp2" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="d95a23a4bb9d71e71309553bb4a7a07389945a59b51ffdf68e04c21b339ddaee" name="nghttp2" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
</package>
<package pkgid="16ef4246ccd4473a42a8d28cd3775316700e0c60de07e734f810d03cfd779255" name="nghttp2" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="5.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
</package>
<package pkgid="92e933c9269ba0a89bfd8d406accc57a441ea2cc16302af754f935934e3551c2" name="nghttp2" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.46.0-6" date="1712491200">- Type:CVE
- ID:CVE-2024-28182
- SUG:restart
- DESC:fix CVE-2024-28182</changelog>
</package>
<package pkgid="064fcef54aa03d2580fa026f2575680fd43a24ba45c9abbd3165573d2876a44d" name="nghttp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="d54f672fe76b36b74be4e6b19f5a9c830943052cffe3fc06ca751bd1cb762f26" name="nghttp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
</package>
<package pkgid="979aa9789f69f9b6b9d34ead4a9e5ef3e4c4b409624583578fac9ec48da5fbb4" name="nghttp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="5.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
</package>
<package pkgid="8a4901c39a57ed40b1b96b7c4cc6000618e54a816115515357a21a976ca7f2e5" name="nghttp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.46.0-6" date="1712491200">- Type:CVE
- ID:CVE-2024-28182
- SUG:restart
- DESC:fix CVE-2024-28182</changelog>
</package>
<package pkgid="37c4bbec141dbef5ad2e6aec3719ef74aa80eb2bfecc74ad17b4d7c83904f8a0" name="nghttp2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="1f563b182c2d51161e60532e16878441471a2b16304fd8c491e164560a3614e0" name="nghttp2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
</package>
<package pkgid="6e40edab3efcb984afc879b22458a7ab55d6454d0f8da976dc0f94b8e34311ce" name="nghttp2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="5.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
</package>
<package pkgid="af42b5aa1a82114881e558cbeee3d26af5743f4e2512584a22b1241209c0bfca" name="nghttp2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.46.0" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.46.0-6" date="1712491200">- Type:CVE
- ID:CVE-2024-28182
- SUG:restart
- DESC:fix CVE-2024-28182</changelog>
</package>
<package pkgid="ed1b389071d98aa5e7f51be607b026d403cb610b4637e7732333e8cd5feaaddc" name="nghttp2-help" arch="noarch">
  <version epoch="0" ver="1.46.0" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="e380f761a042e6872556ec89c77c906e927ad339e2c309ea80717b7dfdd80953" name="nghttp2-help" arch="noarch">
  <version epoch="0" ver="1.46.0" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
</package>
<package pkgid="cd97570c88c550e232e8661947e1ac9a51d1beb894039c0047bc3d478ed36b8e" name="nghttp2-help" arch="noarch">
  <version epoch="0" ver="1.46.0" rel="5.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
</package>
<package pkgid="ab33e133912aa2a070592ff7dde973482ca1ebcb0ea241bb87fd99ec9d7c0e30" name="nghttp2-help" arch="noarch">
  <version epoch="0" ver="1.46.0" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.46.0-6" date="1712491200">- Type:CVE
- ID:CVE-2024-28182
- SUG:restart
- DESC:fix CVE-2024-28182</changelog>
</package>
<package pkgid="fdab14ca8a5883720fcae763185a510d64b9e3a04a8b8ae9de06402e9ea87688" name="nginx" arch="x86_64">
  <version epoch="1" ver="1.21.5" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:1.21.5-1" date="1642248000">- Upgrade nginx to 1.21.5</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-2" date="1658232000">- switch pcre to pcre2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-3" date="1666785600">- fix CVE-2022-41742 CVE-2022-41741</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1:1.21.5-4" date="1669291200">- add package mod-devel</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 1:1.21.5-5" date="1671624000">- add safety compile options</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
</package>
<package pkgid="a59d8695d82fc16440ea0eda15d375bd65688245c6a34fd144b5647628605df6" name="nginx-all-modules" arch="noarch">
  <version epoch="1" ver="1.21.5" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:1.21.5-1" date="1642248000">- Upgrade nginx to 1.21.5</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-2" date="1658232000">- switch pcre to pcre2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-3" date="1666785600">- fix CVE-2022-41742 CVE-2022-41741</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1:1.21.5-4" date="1669291200">- add package mod-devel</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 1:1.21.5-5" date="1671624000">- add safety compile options</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
</package>
<package pkgid="cead6b292cf13a081f7c94a236bf09e6fe45904e3d11cc9c726f465ebecfb302" name="nginx-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.21.5" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:1.21.5-1" date="1642248000">- Upgrade nginx to 1.21.5</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-2" date="1658232000">- switch pcre to pcre2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-3" date="1666785600">- fix CVE-2022-41742 CVE-2022-41741</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1:1.21.5-4" date="1669291200">- add package mod-devel</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 1:1.21.5-5" date="1671624000">- add safety compile options</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
</package>
<package pkgid="1e0077fb5fc524c9572883a02e9e4e09a16257c16aaa24bc5c230705f6196fd7" name="nginx-debugsource" arch="x86_64">
  <version epoch="1" ver="1.21.5" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:1.21.5-1" date="1642248000">- Upgrade nginx to 1.21.5</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-2" date="1658232000">- switch pcre to pcre2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-3" date="1666785600">- fix CVE-2022-41742 CVE-2022-41741</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1:1.21.5-4" date="1669291200">- add package mod-devel</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 1:1.21.5-5" date="1671624000">- add safety compile options</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
</package>
<package pkgid="738ea70fc18bd877219902d194e4ea5bdc9055123567f846330a4b00fe0aaa32" name="nginx-filesystem" arch="noarch">
  <version epoch="1" ver="1.21.5" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:1.21.5-1" date="1642248000">- Upgrade nginx to 1.21.5</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-2" date="1658232000">- switch pcre to pcre2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-3" date="1666785600">- fix CVE-2022-41742 CVE-2022-41741</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1:1.21.5-4" date="1669291200">- add package mod-devel</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 1:1.21.5-5" date="1671624000">- add safety compile options</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
</package>
<package pkgid="39c00292c67afdd62dc425fb842e4e0af0ba816db6c9a2cb3bccb19b5f4e443e" name="nginx-help" arch="noarch">
  <version epoch="1" ver="1.21.5" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:1.21.5-1" date="1642248000">- Upgrade nginx to 1.21.5</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-2" date="1658232000">- switch pcre to pcre2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-3" date="1666785600">- fix CVE-2022-41742 CVE-2022-41741</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1:1.21.5-4" date="1669291200">- add package mod-devel</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 1:1.21.5-5" date="1671624000">- add safety compile options</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
</package>
<package pkgid="053942ab08b7c285d7dc76f5b84ddfb8962f6ef53f3120bbb2f2162a2ca734ac" name="nginx-mod-devel" arch="x86_64">
  <version epoch="1" ver="1.21.5" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:1.21.5-1" date="1642248000">- Upgrade nginx to 1.21.5</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-2" date="1658232000">- switch pcre to pcre2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-3" date="1666785600">- fix CVE-2022-41742 CVE-2022-41741</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1:1.21.5-4" date="1669291200">- add package mod-devel</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 1:1.21.5-5" date="1671624000">- add safety compile options</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
</package>
<package pkgid="9dc6555a85d23e72a483c4c5dc01126b6b1bd1d3db3f447030238adfe5fb940c" name="nginx-mod-http-image-filter" arch="x86_64">
  <version epoch="1" ver="1.21.5" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:1.21.5-1" date="1642248000">- Upgrade nginx to 1.21.5</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-2" date="1658232000">- switch pcre to pcre2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-3" date="1666785600">- fix CVE-2022-41742 CVE-2022-41741</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1:1.21.5-4" date="1669291200">- add package mod-devel</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 1:1.21.5-5" date="1671624000">- add safety compile options</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
</package>
<package pkgid="7afb8d694e0b79a4a0229b45baf898f9f90dc130150f8bae1d43efa99e0817da" name="nginx-mod-http-perl" arch="x86_64">
  <version epoch="1" ver="1.21.5" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:1.21.5-1" date="1642248000">- Upgrade nginx to 1.21.5</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-2" date="1658232000">- switch pcre to pcre2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-3" date="1666785600">- fix CVE-2022-41742 CVE-2022-41741</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1:1.21.5-4" date="1669291200">- add package mod-devel</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 1:1.21.5-5" date="1671624000">- add safety compile options</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
</package>
<package pkgid="9f6b6e3cef9b00f30656f0c65ed9b4c806a2b20fe08ffbc764f1f1152a71f2ef" name="nginx-mod-http-xslt-filter" arch="x86_64">
  <version epoch="1" ver="1.21.5" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:1.21.5-1" date="1642248000">- Upgrade nginx to 1.21.5</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-2" date="1658232000">- switch pcre to pcre2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-3" date="1666785600">- fix CVE-2022-41742 CVE-2022-41741</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1:1.21.5-4" date="1669291200">- add package mod-devel</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 1:1.21.5-5" date="1671624000">- add safety compile options</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
</package>
<package pkgid="df7192abe431385b75f62e3f7c14bc88df54230a2cbf411302e57bc404090238" name="nginx-mod-mail" arch="x86_64">
  <version epoch="1" ver="1.21.5" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:1.21.5-1" date="1642248000">- Upgrade nginx to 1.21.5</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-2" date="1658232000">- switch pcre to pcre2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-3" date="1666785600">- fix CVE-2022-41742 CVE-2022-41741</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1:1.21.5-4" date="1669291200">- add package mod-devel</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 1:1.21.5-5" date="1671624000">- add safety compile options</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
</package>
<package pkgid="7353489458245e78a59cc90ef23225458df79b7e4bf97a7264dffd65d0a16421" name="nginx-mod-stream" arch="x86_64">
  <version epoch="1" ver="1.21.5" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:1.21.5-1" date="1642248000">- Upgrade nginx to 1.21.5</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-2" date="1658232000">- switch pcre to pcre2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-3" date="1666785600">- fix CVE-2022-41742 CVE-2022-41741</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1:1.21.5-4" date="1669291200">- add package mod-devel</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 1:1.21.5-5" date="1671624000">- add safety compile options</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
</package>
<package pkgid="a07ecd923e7aca664b09ed5035c96dc771cd50cc92e329f410c7537134edc46e" name="nmap" arch="x86_64">
  <version epoch="2" ver="7.92" rel="6.oe2203sp1"/>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 2:7.92-1" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update nmap to 7.92</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2:7.92-2" date="1644321600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix nc command permission error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:7.92-3" date="1655467200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:replace sensitive words</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-4" date="1685361600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-5" date="1688644800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:add pcre2 support</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-6" date="1692792000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:nping:fix out of bounds</changelog>
</package>
<package pkgid="ed16ebb20b8a847182b19a8ce1048a8230bc0be1165c0c0948e1c6ddd1f033dd" name="nmap" arch="x86_64">
  <version epoch="2" ver="7.92" rel="8.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2:7.92-2" date="1644321600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix nc command permission error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:7.92-3" date="1655467200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:replace sensitive words</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-4" date="1685361600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-5" date="1688644800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:add pcre2 support</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-6" date="1692792000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:nping:fix out of bounds</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-7" date="1694779200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:enable dt check</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-8" date="1705406400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:remove password printing</changelog>
</package>
<package pkgid="dd1c6e2e24ff67332bb5378ea3bb4c1ef477380cfd2331c240186006c5fd95ed" name="nmap-debuginfo" arch="x86_64">
  <version epoch="2" ver="7.92" rel="6.oe2203sp1"/>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 2:7.92-1" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update nmap to 7.92</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2:7.92-2" date="1644321600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix nc command permission error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:7.92-3" date="1655467200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:replace sensitive words</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-4" date="1685361600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-5" date="1688644800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:add pcre2 support</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-6" date="1692792000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:nping:fix out of bounds</changelog>
</package>
<package pkgid="4e8da905b90085c82723081e5b0b69fa776b53b97675cf4ec9665f47c5cffcdb" name="nmap-debuginfo" arch="x86_64">
  <version epoch="2" ver="7.92" rel="8.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2:7.92-2" date="1644321600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix nc command permission error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:7.92-3" date="1655467200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:replace sensitive words</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-4" date="1685361600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-5" date="1688644800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:add pcre2 support</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-6" date="1692792000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:nping:fix out of bounds</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-7" date="1694779200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:enable dt check</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-8" date="1705406400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:remove password printing</changelog>
</package>
<package pkgid="89ae7fd5b69ef3c566e1630a7148e5e6e7342dcf158b9a417e5bf49eb9481767" name="nmap-debugsource" arch="x86_64">
  <version epoch="2" ver="7.92" rel="6.oe2203sp1"/>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 2:7.92-1" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update nmap to 7.92</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2:7.92-2" date="1644321600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix nc command permission error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:7.92-3" date="1655467200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:replace sensitive words</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-4" date="1685361600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-5" date="1688644800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:add pcre2 support</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-6" date="1692792000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:nping:fix out of bounds</changelog>
</package>
<package pkgid="e2d3a7b773f063fec1254e98b4ef03ee9e1a517e91276307d243a625d289722b" name="nmap-debugsource" arch="x86_64">
  <version epoch="2" ver="7.92" rel="8.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2:7.92-2" date="1644321600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix nc command permission error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:7.92-3" date="1655467200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:replace sensitive words</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-4" date="1685361600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-5" date="1688644800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:add pcre2 support</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-6" date="1692792000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:nping:fix out of bounds</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-7" date="1694779200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:enable dt check</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-8" date="1705406400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:remove password printing</changelog>
</package>
<package pkgid="d5fce6f0f3b9e80a5e8c2cf9db67e9c0a47d5ae38174823270d10a414b29a510" name="nmap-help" arch="noarch">
  <version epoch="2" ver="7.92" rel="6.oe2203sp1"/>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 2:7.92-1" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update nmap to 7.92</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2:7.92-2" date="1644321600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix nc command permission error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:7.92-3" date="1655467200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:replace sensitive words</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-4" date="1685361600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-5" date="1688644800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:add pcre2 support</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-6" date="1692792000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:nping:fix out of bounds</changelog>
</package>
<package pkgid="10a32492bf293a5b70329f7df5888e837e721b80de490c79b5b13424e2c74dd2" name="nmap-help" arch="noarch">
  <version epoch="2" ver="7.92" rel="8.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2:7.92-2" date="1644321600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix nc command permission error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:7.92-3" date="1655467200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:replace sensitive words</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-4" date="1685361600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-5" date="1688644800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:add pcre2 support</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-6" date="1692792000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:nping:fix out of bounds</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-7" date="1694779200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:enable dt check</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-8" date="1705406400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:remove password printing</changelog>
</package>
<package pkgid="2aa5e9bf5679515665e5da3fc4a25af9ffd94f82191347c6f99139c346c40ccb" name="nodejs" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe1@huawei.com&gt; - 1:12.18.4-4" date="1615809600">- fix CVE-2021-22883 CVE-2021-22884</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-5" date="1626782400">- fix CVE-2021-22918</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-6" date="1629115200">- use getauxval to fix build failure in node_main.cc</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
</package>
<package pkgid="10e5c1016163cfce40d45781e44c57f15199b44639f0755dbd6db5331a92f337" name="nodejs" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
</package>
<package pkgid="f8a6350fd90b8555fab174e3616d620e7a3a998445f5c1c7c5ae676be0d91577" name="nodejs" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
</package>
<package pkgid="22ec472cee5d5752ff4bbf1bd807faf776b7401d6995caae6197dd5c63e8c4d9" name="nodejs" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="9.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-7" date="1707134400">- add loong64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-8" date="1707134401">- Fix CVE-2023-0464 and CVE-2023-0465</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-9" date="1707220800">- Fix CVE-2023-44487</changelog>
</package>
<package pkgid="ae3e665ba87355596bc3d545c2861fc842c842dc92815fb999e621037cfc269d" name="nodejs-debuginfo" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe1@huawei.com&gt; - 1:12.18.4-4" date="1615809600">- fix CVE-2021-22883 CVE-2021-22884</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-5" date="1626782400">- fix CVE-2021-22918</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-6" date="1629115200">- use getauxval to fix build failure in node_main.cc</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
</package>
<package pkgid="cecc164b25a72820216a801c5097ac30289d784d9c0303ab9f501dc7497ebbe3" name="nodejs-debuginfo" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
</package>
<package pkgid="49d60cf1650eb03fdd76f9d8157b7077b04bc0a4e50eb68c94e23b9a1f887386" name="nodejs-debuginfo" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
</package>
<package pkgid="f55b3280c5e4a38af938be08ee502589670edf30fb2b27b5ef73c06b4f427a5b" name="nodejs-debuginfo" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="9.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-7" date="1707134400">- add loong64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-8" date="1707134401">- Fix CVE-2023-0464 and CVE-2023-0465</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-9" date="1707220800">- Fix CVE-2023-44487</changelog>
</package>
<package pkgid="a956648dd792770375dfae1d6635b5001edf1cd382034c213b9ddba4e65b3b26" name="nodejs-debugsource" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe1@huawei.com&gt; - 1:12.18.4-4" date="1615809600">- fix CVE-2021-22883 CVE-2021-22884</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-5" date="1626782400">- fix CVE-2021-22918</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-6" date="1629115200">- use getauxval to fix build failure in node_main.cc</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
</package>
<package pkgid="fcf06e03faec7e4ef79a37de3290bc7a3f67cf876135f7ba2b800e972d398493" name="nodejs-debugsource" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
</package>
<package pkgid="c4c53c4c1c7f21518c70c05183d9df73cd50ed24e72667de84a305022b972cef" name="nodejs-debugsource" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
</package>
<package pkgid="a34011ff224fece647f8c18c9dfde0cfdb9e46f7911ded9db6e1e8bc3d059a48" name="nodejs-debugsource" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="9.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-7" date="1707134400">- add loong64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-8" date="1707134401">- Fix CVE-2023-0464 and CVE-2023-0465</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-9" date="1707220800">- Fix CVE-2023-44487</changelog>
</package>
<package pkgid="35268688ecb08aa403b47ebe592f9eede713f413f5b01b18fc01aa4e2907ebb2" name="nodejs-devel" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe1@huawei.com&gt; - 1:12.18.4-4" date="1615809600">- fix CVE-2021-22883 CVE-2021-22884</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-5" date="1626782400">- fix CVE-2021-22918</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-6" date="1629115200">- use getauxval to fix build failure in node_main.cc</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
</package>
<package pkgid="33bf6e0a934d992d6758b9c9cbbe2544eefd7614c23811e823d8c99225cbdda5" name="nodejs-devel" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
</package>
<package pkgid="c4d786b7a35c9b183bfae057f826599aa31c3bebc316ebbbc871b11ef6735100" name="nodejs-devel" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
</package>
<package pkgid="c4471220efc5430a0352ecb27e2ee61aa7bb20911a48afe6b28585a62a2e5c6e" name="nodejs-devel" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="9.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-7" date="1707134400">- add loong64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-8" date="1707134401">- Fix CVE-2023-0464 and CVE-2023-0465</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-9" date="1707220800">- Fix CVE-2023-44487</changelog>
</package>
<package pkgid="c7df10d01dd8a05c890f35acb1b63d83c817598d51a515479ff3911980be285b" name="nodejs-docs" arch="noarch">
  <version epoch="1" ver="12.22.11" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe1@huawei.com&gt; - 1:12.18.4-4" date="1615809600">- fix CVE-2021-22883 CVE-2021-22884</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-5" date="1626782400">- fix CVE-2021-22918</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-6" date="1629115200">- use getauxval to fix build failure in node_main.cc</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
</package>
<package pkgid="4b1cb774cc61dc7ff253ced657372494148b93d5d42c9ab0cdd14254e1b9912c" name="nodejs-docs" arch="noarch">
  <version epoch="1" ver="12.22.11" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
</package>
<package pkgid="fc762b2f942be16b6993fd3ff5ea6b00eac9567150a5285db3ded242d169bbd5" name="nodejs-docs" arch="noarch">
  <version epoch="1" ver="12.22.11" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
</package>
<package pkgid="7549381e726dc0c32c1616795c8c41ea9b6d51a525e31aca518c8b91c88ba55a" name="nodejs-docs" arch="noarch">
  <version epoch="1" ver="12.22.11" rel="9.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-7" date="1707134400">- add loong64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-8" date="1707134401">- Fix CVE-2023-0464 and CVE-2023-0465</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-9" date="1707220800">- Fix CVE-2023-44487</changelog>
</package>
<package pkgid="2c71fa3863bc611fed4a6ee137f0e0b68f9b32bb310aef7ee48bf7665cd99242" name="nodejs-full-i18n" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe1@huawei.com&gt; - 1:12.18.4-4" date="1615809600">- fix CVE-2021-22883 CVE-2021-22884</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-5" date="1626782400">- fix CVE-2021-22918</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-6" date="1629115200">- use getauxval to fix build failure in node_main.cc</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
</package>
<package pkgid="ac36a26509d8ecafb976d18e21070bb975ba98723fad33d20b641c51dd4c6703" name="nodejs-full-i18n" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
</package>
<package pkgid="4def742dd5b7e1b1bb472dfe29ccfa091fe07cbc20cdf68461270555873c68af" name="nodejs-full-i18n" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
</package>
<package pkgid="15a1d844a8933275710eddfda8cb101dba3826bf05a4e3ecccafd63f52a4d726" name="nodejs-full-i18n" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="9.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-7" date="1707134400">- add loong64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-8" date="1707134401">- Fix CVE-2023-0464 and CVE-2023-0465</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-9" date="1707220800">- Fix CVE-2023-44487</changelog>
</package>
<package pkgid="89c0278005bc855846511d94ae1dc41df1cd9645d3205149a48e7c6ae503c29f" name="nodejs-hawk" arch="noarch">
  <version epoch="0" ver="9.0.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 4.1.2-2" date="1652788800">- Fix CVE-2022-29167</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 9.0.1-1" date="1666612800">- Upgrade to 9.0.1</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 9.0.1-2" date="1685620800">- remove unused hapi dependencies</changelog>
</package>
<package pkgid="9bc0efd90732a46c010994bd6423c633781502818f6d8a8bb8b11fbbc586c31e" name="nodejs-libs" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe1@huawei.com&gt; - 1:12.18.4-4" date="1615809600">- fix CVE-2021-22883 CVE-2021-22884</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-5" date="1626782400">- fix CVE-2021-22918</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-6" date="1629115200">- use getauxval to fix build failure in node_main.cc</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
</package>
<package pkgid="8478c56144772b356d306ee48d0856268be2999320b457b436f1ceaa82cb0be8" name="nodejs-libs" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
</package>
<package pkgid="c5b30afbe341a03f79ec1429052e25a6c2be85355fb38d0d75795cab32424abd" name="nodejs-libs" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
</package>
<package pkgid="d79df6a67b56eab4f8dd7d2a41f70227b6e5a720c19592069b16a61b0c9f4715" name="nodejs-libs" arch="x86_64">
  <version epoch="1" ver="12.22.11" rel="9.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-7" date="1707134400">- add loong64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-8" date="1707134401">- Fix CVE-2023-0464 and CVE-2023-0465</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-9" date="1707220800">- Fix CVE-2023-44487</changelog>
</package>
<package pkgid="408ffaceb6aeaec60cab3dce93285c5eb15e3df5415c0caac12493b399bb4a6e" name="nodejs-qs" arch="noarch">
  <version epoch="0" ver="6.5.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 6.5.1-2" date="1711454400">- Fix CVE-2022-24999</changelog>
</package>
<package pkgid="b35f5d5b97eb45e550bc5cf2ddca4cdc43e856e764d12277062ee5135ad98337" name="nodejs-tiny-lr-fork" arch="noarch">
  <version epoch="0" ver="0.0.5" rel="3.oe2203sp1"/>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 0.0.5-2" date="1656763200">- Updating debug version</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 0.0.5-3" date="1685620800">- add requires request for update-livereload error</changelog>
</package>
<package pkgid="98784e7b2282f7782844e1480e661bde5680a750781b24ac21ffaf91464712ca" name="nodejs-tough-cookie" arch="noarch">
  <version epoch="0" ver="2.3.2" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3.2-3" date="1702382400">- Fix CVE-2023-26136</changelog>
</package>
<package pkgid="07a98bb166e7c6dae9ab68c307784ef50ebea113a7a11eb0b3e661008d1e4580" name="npm" arch="x86_64">
  <version epoch="1" ver="6.14.16" rel="1.12.22.11.4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe1@huawei.com&gt; - 1:12.18.4-4" date="1615809600">- fix CVE-2021-22883 CVE-2021-22884</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-5" date="1626782400">- fix CVE-2021-22918</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-6" date="1629115200">- use getauxval to fix build failure in node_main.cc</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
</package>
<package pkgid="687ff4c394617c9a6c322b0a1bbed98d52bb05d59f8ef77e63d45d67e4f56ba2" name="npm" arch="x86_64">
  <version epoch="1" ver="6.14.16" rel="1.12.22.11.5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
</package>
<package pkgid="7cc3542527b915413215df2b80c257725b7585484f88d63eadef5ffcd71291d8" name="npm" arch="x86_64">
  <version epoch="1" ver="6.14.16" rel="1.12.22.11.6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
</package>
<package pkgid="f11c5adc1f2497cac5ada0d0215e4af6357d2a34a86d3b670ad1cfc4a28c9e8d" name="npm" arch="x86_64">
  <version epoch="1" ver="6.14.16" rel="1.12.22.11.9.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-7" date="1707134400">- add loong64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-8" date="1707134401">- Fix CVE-2023-0464 and CVE-2023-0465</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-9" date="1707220800">- Fix CVE-2023-44487</changelog>
</package>
<package pkgid="4dd46e91dd90f764d3c50c6f3df918ea8d746ef2ed766734de3d779c11fca797" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="fa6ff6eefe484862c3cd998a77b3af7f3704958f2d0138b664f7d60d1be033d6" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="8d0ef57211b9f9ff5e5855a5fe22dd81e28ed649c27ba4f5f022d7e0df3082b8" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="c6602aec47618f69c4ed7a884d7d7f1c4982bc6026c67c2b69ab4b60f439b042" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="b05bbffd4d8990914d07231c21ab35f50235f7884fbffa0f2a129dcfc0b85cd5" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="b4b87081a068c4763f4ddd20b7b777ce267492ee14fb30eb96c49caded480ec7" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="b83e96176f9137724c093c1238e77dd706ba1cd6f0ff4781c643f69eb03ea5df" name="nspr" arch="x86_64">
  <version epoch="0" ver="4.32.0" rel="5.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 4.29.0-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/nspr-gcc-atomics.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 4.32.0-1" date="1638187200">- update to 4.32.0</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 4.32.0-2" date="1666699200">- rebuild package</changelog>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 4.32.0-3" date="1668427200">- Support loongarch64</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.32.0-4" date="1669204800">- Add sw64 architecture</changelog>
  <changelog author="Wenyu Liu&lt;liuwenyu7@huawei.com&gt; - 4.32.0-5" date="1677240000">- disable debug option</changelog>
</package>
<package pkgid="126d79f59e697ea0b4589fe87a72a03fda34f01cf7d6498dae20fef152608add" name="nspr-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.32.0" rel="5.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 4.29.0-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/nspr-gcc-atomics.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 4.32.0-1" date="1638187200">- update to 4.32.0</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 4.32.0-2" date="1666699200">- rebuild package</changelog>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 4.32.0-3" date="1668427200">- Support loongarch64</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.32.0-4" date="1669204800">- Add sw64 architecture</changelog>
  <changelog author="Wenyu Liu&lt;liuwenyu7@huawei.com&gt; - 4.32.0-5" date="1677240000">- disable debug option</changelog>
</package>
<package pkgid="7a2f81e41b7598f26720a09c29dbbb7ffa2578fd3dde821e97a30c3b1dcc56d9" name="nspr-debugsource" arch="x86_64">
  <version epoch="0" ver="4.32.0" rel="5.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 4.29.0-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/nspr-gcc-atomics.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 4.32.0-1" date="1638187200">- update to 4.32.0</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 4.32.0-2" date="1666699200">- rebuild package</changelog>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 4.32.0-3" date="1668427200">- Support loongarch64</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.32.0-4" date="1669204800">- Add sw64 architecture</changelog>
  <changelog author="Wenyu Liu&lt;liuwenyu7@huawei.com&gt; - 4.32.0-5" date="1677240000">- disable debug option</changelog>
</package>
<package pkgid="dd9e7b39f63ef072c00b38a751378079eb5ddfffe204be3b9a0e80b4e43ffa0f" name="nspr-devel" arch="x86_64">
  <version epoch="0" ver="4.32.0" rel="5.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 4.29.0-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/nspr-gcc-atomics.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 4.32.0-1" date="1638187200">- update to 4.32.0</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 4.32.0-2" date="1666699200">- rebuild package</changelog>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 4.32.0-3" date="1668427200">- Support loongarch64</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.32.0-4" date="1669204800">- Add sw64 architecture</changelog>
  <changelog author="Wenyu Liu&lt;liuwenyu7@huawei.com&gt; - 4.32.0-5" date="1677240000">- disable debug option</changelog>
</package>
<package pkgid="525d3edbdf9b4d0a5b5f6ad7a49660fd600701c48af86e95d8c0e0b4b4b99728" name="nss" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="7.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
</package>
<package pkgid="681ff7571f71c6cc899f334241efff2318ba528fcc19d549b7728615f47a6e0f" name="nss" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="9.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-8" date="1685361600">- Fix build failed.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-9" date="1685966400">- Add Integrity Verification File in nss-softokn.</changelog>
</package>
<package pkgid="06e7b2a38fab78bea996b7acb79f7e7d4b14037c1f0cafe318c31b012f00cfff" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="7.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
</package>
<package pkgid="306fdaef58956aeb2f5e69ac38afeacae804c3a1eb2fcfb85d10a5daea5226b2" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="9.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-8" date="1685361600">- Fix build failed.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-9" date="1685966400">- Add Integrity Verification File in nss-softokn.</changelog>
</package>
<package pkgid="f1bb6cdb568090d0f545dc6ce864e313c9a72c48156368486732fff796116f87" name="nss-debugsource" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="7.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
</package>
<package pkgid="ec1d2b9f2bec5958d74df8c911de060125a2bc5ebe1f394991f52946cf40631b" name="nss-debugsource" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="9.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-8" date="1685361600">- Fix build failed.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-9" date="1685966400">- Add Integrity Verification File in nss-softokn.</changelog>
</package>
<package pkgid="08f16458fa19ae0a58d3a8076a07b9b2320322c1c265462e4e6a34826bf7ace2" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="7.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
</package>
<package pkgid="3e9bef11ec50ffd8b2080569d5c964ee646d66e48f548e2883d05615f2e46da5" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="9.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-8" date="1685361600">- Fix build failed.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-9" date="1685966400">- Add Integrity Verification File in nss-softokn.</changelog>
</package>
<package pkgid="5d221ec4dd346445af5ad400c487214b78578965fc8cf77a6a9465057ca6a3a5" name="nss-help" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="7.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
</package>
<package pkgid="559a6d66fdba9770246a85112ae9e204124cbdefd3daa420704a0d2df56bdc4b" name="nss-help" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="9.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-8" date="1685361600">- Fix build failed.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-9" date="1685966400">- Add Integrity Verification File in nss-softokn.</changelog>
</package>
<package pkgid="ffc0d56f2cc114180c370bff511628049437eb56f983c64a288b59e92eb35332" name="nss-softokn" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="7.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
</package>
<package pkgid="b80ab2efd80dcb360470337629a96e5a9b2cc75231b615e984272fd194d6c1f0" name="nss-softokn" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="9.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-8" date="1685361600">- Fix build failed.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-9" date="1685966400">- Add Integrity Verification File in nss-softokn.</changelog>
</package>
<package pkgid="ee0c6d5cfaf4857b9ee65369e786a25e9631bfbca3c44236e2e09ad0d7e13063" name="nss-softokn-devel" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="7.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
</package>
<package pkgid="224399a8494b1fe9a311b1ef38ab06755e707918b471b053770b9449522638ba" name="nss-softokn-devel" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="9.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-8" date="1685361600">- Fix build failed.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-9" date="1685966400">- Add Integrity Verification File in nss-softokn.</changelog>
</package>
<package pkgid="c92d21c0fefcdcddfda9f47914fca581af401f8f67671291991346cfbe4b08b5" name="nss-util" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="7.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
</package>
<package pkgid="b57f8b3a5e302b950ffa04df1762b2935c19394c39575404bb9f0403cf164767" name="nss-util" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="9.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-8" date="1685361600">- Fix build failed.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-9" date="1685966400">- Add Integrity Verification File in nss-softokn.</changelog>
</package>
<package pkgid="bb149d2a66ba7751dfcb9c42d3ccc9c12034b15eb637308300b688d8c548c8f7" name="nss-util-devel" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="7.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
</package>
<package pkgid="37f7b4af0178e4e9c99eddf1e812147f1f6fcbeefd5ca3ac06e07c31105465ba" name="nss-util-devel" arch="x86_64">
  <version epoch="0" ver="3.72.0" rel="9.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-8" date="1685361600">- Fix build failed.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-9" date="1685966400">- Add Integrity Verification File in nss-softokn.</changelog>
</package>
<package pkgid="254fd111d91c0245978f8f703356516cf170b98ec76c8e7888c622564c3858e6" name="nss_modules" arch="x86_64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="5ae9ba635b6b4a618fd161556a2d1e68c7a82e61693f4e5412a0e690077d1a6c" name="nss_modules" arch="x86_64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="56804be1df0dd505427bac26f4e4b28d8f2010ebee0162a634c6a0fc6b267ade" name="nss_modules" arch="x86_64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="84464638aebf7346f7380eb24f3073782dd9ca7c3f5df69de676beb05faeb24f" name="nss_modules" arch="x86_64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="620b85db6a65a434656a71354e0f329e7288d44650af9ef527a5f238528b05fd" name="nss_modules" arch="x86_64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="936f74f466ab0018cda2cc7ef010e822fb51f6382e080526398b9068fb74f726" name="nss_modules" arch="x86_64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="6b6d32e68e013ac511e95687a0ce33e46616ec50d972b7c9492ee86bc4ab29f0" name="ntp" arch="x86_64">
  <version epoch="0" ver="4.2.8p15" rel="10.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-3" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix multiple defination with gcc 10</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-4" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do not use PTHREAD_STACK_MIN on glibc</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-10" date="1684929600">- Type:CVE
- ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
- SUG:NA
- DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555</changelog>
</package>
<package pkgid="eb24ae21da550c99848c0b73c88e8fab371b2e123735cec4935d586d01c34c9b" name="ntp" arch="x86_64">
  <version epoch="0" ver="4.2.8p15" rel="13.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-10" date="1684929600">- Type:CVE
- ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
- SUG:NA
- DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-11" date="1687348800">- Type:bugfix
- ID:
- SUG:NA
- DESC:add NULL pointer check when ntpd deletes the last interface</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-12" date="1689163200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Restart and conflilct service in ntpd.service</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 4.2.8p15-13" date="1700827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update ntpd.service</changelog>
</package>
<package pkgid="fde54fcdd5c1fb426600654b4aed80b65639432d17c24f5b31bfaebdaa617b21" name="ntp" arch="x86_64">
  <version epoch="0" ver="4.2.8p15" rel="9.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-3" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix multiple defination with gcc 10</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-4" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do not use PTHREAD_STACK_MIN on glibc</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
</package>
<package pkgid="f1a053c9b46ecd55388b013281fb5c724f451ba02322e20c631ac06601517586" name="ntp-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2.8p15" rel="10.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-3" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix multiple defination with gcc 10</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-4" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do not use PTHREAD_STACK_MIN on glibc</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-10" date="1684929600">- Type:CVE
- ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
- SUG:NA
- DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555</changelog>
</package>
<package pkgid="1084f3d85ecc2ea5d92c8a6f3b9ced897e2a6ca82ea9414f7cbf7eb51b5323d7" name="ntp-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2.8p15" rel="13.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-10" date="1684929600">- Type:CVE
- ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
- SUG:NA
- DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-11" date="1687348800">- Type:bugfix
- ID:
- SUG:NA
- DESC:add NULL pointer check when ntpd deletes the last interface</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-12" date="1689163200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Restart and conflilct service in ntpd.service</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 4.2.8p15-13" date="1700827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update ntpd.service</changelog>
</package>
<package pkgid="8c93daac84de005a0db64b697aa66c10a3aed1a63aab4d55da957b1f1c159d5c" name="ntp-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2.8p15" rel="9.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-3" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix multiple defination with gcc 10</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-4" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do not use PTHREAD_STACK_MIN on glibc</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
</package>
<package pkgid="8e32c3527cb8943b323e467c4551bdb84fe973d13269b618a4674b4bd10596d5" name="ntp-debugsource" arch="x86_64">
  <version epoch="0" ver="4.2.8p15" rel="10.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-3" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix multiple defination with gcc 10</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-4" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do not use PTHREAD_STACK_MIN on glibc</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-10" date="1684929600">- Type:CVE
- ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
- SUG:NA
- DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555</changelog>
</package>
<package pkgid="7519b7e9a3b14ccf7aafcb8b40185f67052484b83680afb538de70c9a1e0ce22" name="ntp-debugsource" arch="x86_64">
  <version epoch="0" ver="4.2.8p15" rel="13.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-10" date="1684929600">- Type:CVE
- ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
- SUG:NA
- DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-11" date="1687348800">- Type:bugfix
- ID:
- SUG:NA
- DESC:add NULL pointer check when ntpd deletes the last interface</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-12" date="1689163200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Restart and conflilct service in ntpd.service</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 4.2.8p15-13" date="1700827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update ntpd.service</changelog>
</package>
<package pkgid="a6f6dc55f3b643f402f9a849b12a27f915bfa19586c1269147b780e6e45aec37" name="ntp-debugsource" arch="x86_64">
  <version epoch="0" ver="4.2.8p15" rel="9.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-3" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix multiple defination with gcc 10</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-4" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do not use PTHREAD_STACK_MIN on glibc</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
</package>
<package pkgid="81dcc990973202e0c7a288d55e26d458683671c9cd6a50f2008453292b653d46" name="ntp-help" arch="noarch">
  <version epoch="0" ver="4.2.8p15" rel="10.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-3" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix multiple defination with gcc 10</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-4" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do not use PTHREAD_STACK_MIN on glibc</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-10" date="1684929600">- Type:CVE
- ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
- SUG:NA
- DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555</changelog>
</package>
<package pkgid="727d96d7802a7f00bfe06b03474a3f97fdcb2cd4694c54adb1a0cab35cfa8e25" name="ntp-help" arch="noarch">
  <version epoch="0" ver="4.2.8p15" rel="13.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-10" date="1684929600">- Type:CVE
- ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
- SUG:NA
- DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-11" date="1687348800">- Type:bugfix
- ID:
- SUG:NA
- DESC:add NULL pointer check when ntpd deletes the last interface</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-12" date="1689163200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Restart and conflilct service in ntpd.service</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 4.2.8p15-13" date="1700827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update ntpd.service</changelog>
</package>
<package pkgid="f2b7227755c2002c1b94a7ec678e1e8dfbb374552c72079209f6d62254589c47" name="ntp-help" arch="noarch">
  <version epoch="0" ver="4.2.8p15" rel="9.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-3" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix multiple defination with gcc 10</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-4" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do not use PTHREAD_STACK_MIN on glibc</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
</package>
<package pkgid="b2df75526f15b998bac1df40d650ecc4cfcfaed08672973da9ef2b6d71443a94" name="ntp-perl" arch="noarch">
  <version epoch="0" ver="4.2.8p15" rel="10.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-3" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix multiple defination with gcc 10</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-4" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do not use PTHREAD_STACK_MIN on glibc</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-10" date="1684929600">- Type:CVE
- ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
- SUG:NA
- DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555</changelog>
</package>
<package pkgid="e6c8e192a32b9d16261663d9f984c51bef78f07b41e030b463b4f06e77eedc2d" name="ntp-perl" arch="noarch">
  <version epoch="0" ver="4.2.8p15" rel="13.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-10" date="1684929600">- Type:CVE
- ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
- SUG:NA
- DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-11" date="1687348800">- Type:bugfix
- ID:
- SUG:NA
- DESC:add NULL pointer check when ntpd deletes the last interface</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-12" date="1689163200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Restart and conflilct service in ntpd.service</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 4.2.8p15-13" date="1700827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update ntpd.service</changelog>
</package>
<package pkgid="b2c25256a4c9ad4bdae5fad410e24612eac8254a58e7fd773fc9fd0a6e07c04b" name="ntp-perl" arch="noarch">
  <version epoch="0" ver="4.2.8p15" rel="9.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-3" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix multiple defination with gcc 10</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-4" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do not use PTHREAD_STACK_MIN on glibc</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
</package>
<package pkgid="836f9c52186d27eb23e9fd3b75fdf45272416387238f7d3e0315ba743452c0db" name="numpy-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.21.4" rel="8.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.21.4-4" date="1653566400">- fix CVE-2021-34141</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1:1.21.4-5" date="1692273600">- Add loongarch64 and sw_64 support</changelog>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 1:1.21.4-6" date="1698667200">- Remove f2py from numpy package. It is in numpy-f2py pakcage.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.21.4-7" date="1706788800">- Do not pack open-source test case files</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1:1.21.4-8" date="1709208000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:make the test check</changelog>
</package>
<package pkgid="abc8d54aa78e3260ff0832c4806bf4e41fbb5e79131808c11d14a8a2f3ea5c1f" name="numpy-debugsource" arch="x86_64">
  <version epoch="1" ver="1.21.4" rel="8.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.21.4-4" date="1653566400">- fix CVE-2021-34141</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1:1.21.4-5" date="1692273600">- Add loongarch64 and sw_64 support</changelog>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 1:1.21.4-6" date="1698667200">- Remove f2py from numpy package. It is in numpy-f2py pakcage.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.21.4-7" date="1706788800">- Do not pack open-source test case files</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1:1.21.4-8" date="1709208000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:make the test check</changelog>
</package>
<package pkgid="f35a2f9791cc5fdd0c2552c93befb77430c297c94634c38fa87333aabf31593d" name="nvwa" arch="x86_64">
  <version epoch="0" ver="0.2" rel="4.oe2203sp1"/>
  <changelog author="anatasluo &lt;luolongjun@huawei.com&gt; - 0.0.1-1" date="1613649600">- Update to 0.0.1</changelog>
  <changelog author="anatasluo &lt;luolongjun@huawei.com&gt; 0.1-2" date="1616068800">- Update to 0.1-r2</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 0.1-3" date="1616155200">- Add secure compile args</changelog>
  <changelog author="anatasluo &lt;luolongjun@huawei.com&gt; - 0.2-1" date="1627646400">- Update to 0.2</changelog>
  <changelog author="anatasluo &lt;luolongjun@huawei.com&gt; - 0.2-2" date="1671019200">- Fix issues caused by ctrl-c and systemd</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 0.2-3" date="1671105600">- Enable debuginfo for fix strip</changelog>
  <changelog author="anatasluo &lt;luolongjun@huawei.com&gt; - 0.2-4" date="1672747200">- Solve the problem of parsing pid of message</changelog>
</package>
<package pkgid="c8c37dac04752b5cf4743e66082c45acd3ed8e070797cd99e3250a55ba4b3b06" name="obs-api" arch="noarch">
  <version epoch="0" ver="2.10.15" rel="8.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 2.10.11-5" date="1653393600">- Update gems version for fix rpmbuild error</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 2.10.11-6" date="1653566400">- Fix obs-api install warning</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 2.10.15-1" date="1666872000">- Upgrade to version 2.10.15</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 2.10.15-2" date="1668686400">- The keyword openEuler is deleted from the patch name</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.15-3" date="1669636800">- Add make dependency</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.15-4" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-5" date="1685707200">- Add post script to adatp selinux policy</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-6" date="1686830400">- Replace src package with commit a39f185b53492d2207e9b2c0437fd7d407b864f3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-7" date="1687953600">- fix obs-clockwork service start failure</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-8" date="1716206400">- Fix update failure</changelog>
</package>
<package pkgid="fcb78c480278b66c45cfbf99877b008d60cd50c30b81a35b6679809ce060683d" name="obs-api" arch="noarch">
  <version epoch="0" ver="2.10.15" rel="9.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 2.10.11-6" date="1653566400">- Fix obs-api install warning</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 2.10.15-1" date="1666872000">- Upgrade to version 2.10.15</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 2.10.15-2" date="1668686400">- The keyword openEuler is deleted from the patch name</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.15-3" date="1669636800">- Add make dependency</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.15-4" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-5" date="1685707200">- Add post script to adatp selinux policy</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-6" date="1686830400">- Replace src package with commit a39f185b53492d2207e9b2c0437fd7d407b864f3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-7" date="1687953600">- fix obs-clockwork service start failure</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-8" date="1716206400">- Fix update failure</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-9" date="1716465600">- Clear insignificance infomation when running post script</changelog>
</package>
<package pkgid="e68d5c9e0852b0875658eca885c98eb242a420d0215da1193d6caacbb725afd9" name="obs-api-deps" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="10.oe2203sp1"/>
  <changelog author="zhaomengchao &lt;zhaomengchao3@huawei.com&gt; 2.10.1-2" date="1623240000">- fix obs-bundled-gems compilation failed.</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; 2.10.1-3" date="1632398400">- Fix exec permission in ruby/2.5.0/bin, change require to mariadb-server</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; 2.10.1-4" date="1647864000">- Fix compilation failed due to ruby and some rubygems upgraded</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-5" date="1652356800">- Update xmlhash to 1.3.8</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-6" date="1653393600">- Update Gemfile.lock factory_bot-6.2.1 and pry-0.13.1 and pry-byebug-3.9.0</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; 2.10.1-7" date="1666872000">- Update gem version for obs-server 2.10.15</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.1-8" date="1670414400">- Add make dependency</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 2.10.1-9" date="1675425600">- Add components that are missing from the source package</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-10" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
</package>
<package pkgid="e0d87f6454def2e3e3ccfd1345588a4d03000f2ed6c6ad649aaf2a319faad97f" name="obs-api-deps" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="8.oe2203sp1"/>
  <changelog author="zhaomengchao &lt;zhaomengchao3@huawei.com&gt; 2.10.1-2" date="1623240000">- fix obs-bundled-gems compilation failed.</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; 2.10.1-3" date="1632398400">- Fix exec permission in ruby/2.5.0/bin, change require to mariadb-server</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; 2.10.1-4" date="1647864000">- Fix compilation failed due to ruby and some rubygems upgraded</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-5" date="1652356800">- Update xmlhash to 1.3.8</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-6" date="1653393600">- Update Gemfile.lock factory_bot-6.2.1 and pry-0.13.1 and pry-byebug-3.9.0</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; 2.10.1-7" date="1666872000">- Update gem version for obs-server 2.10.15</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.1-8" date="1670414400">- Add make dependency</changelog>
</package>
<package pkgid="846f0170d3240f1246c464786fc332b92457df54daaa0b8c063a9204e8b17f4a" name="obs-api-deps" arch="x86_64">
  <version epoch="0" ver="2.10.15" rel="1.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; 2.10.1-4" date="1647864000">- Fix compilation failed due to ruby and some rubygems upgraded</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-5" date="1652356800">- Update xmlhash to 1.3.8</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-6" date="1653393600">- Update Gemfile.lock factory_bot-6.2.1 and pry-0.13.1 and pry-byebug-3.9.0</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; 2.10.1-7" date="1666872000">- Update gem version for obs-server 2.10.15</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.1-8" date="1670414400">- Add make dependency</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 2.10.1-9" date="1675425600">- Add components that are missing from the source package</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-10" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.10.1-11" date="1693224000">- add loongarch64 support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.10.15-1" date="1700568000">- Replace Gemfile with commit a39f185b53492d2207e9b2c0437fd7d407b864f3</changelog>
</package>
<package pkgid="55e96006663f4809ed929c89aaff7ca0df8af9448a9406e7746d52ab8bce3deb" name="obs-api-testsuite-deps" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="10.oe2203sp1"/>
  <changelog author="zhaomengchao &lt;zhaomengchao3@huawei.com&gt; 2.10.1-2" date="1623240000">- fix obs-bundled-gems compilation failed.</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; 2.10.1-3" date="1632398400">- Fix exec permission in ruby/2.5.0/bin, change require to mariadb-server</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; 2.10.1-4" date="1647864000">- Fix compilation failed due to ruby and some rubygems upgraded</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-5" date="1652356800">- Update xmlhash to 1.3.8</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-6" date="1653393600">- Update Gemfile.lock factory_bot-6.2.1 and pry-0.13.1 and pry-byebug-3.9.0</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; 2.10.1-7" date="1666872000">- Update gem version for obs-server 2.10.15</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.1-8" date="1670414400">- Add make dependency</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 2.10.1-9" date="1675425600">- Add components that are missing from the source package</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-10" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
</package>
<package pkgid="874593eda6c524fb049ca0c4ec913bbb6c53e35eeba24e53d7e2e8096781928c" name="obs-api-testsuite-deps" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="8.oe2203sp1"/>
  <changelog author="zhaomengchao &lt;zhaomengchao3@huawei.com&gt; 2.10.1-2" date="1623240000">- fix obs-bundled-gems compilation failed.</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; 2.10.1-3" date="1632398400">- Fix exec permission in ruby/2.5.0/bin, change require to mariadb-server</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; 2.10.1-4" date="1647864000">- Fix compilation failed due to ruby and some rubygems upgraded</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-5" date="1652356800">- Update xmlhash to 1.3.8</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-6" date="1653393600">- Update Gemfile.lock factory_bot-6.2.1 and pry-0.13.1 and pry-byebug-3.9.0</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; 2.10.1-7" date="1666872000">- Update gem version for obs-server 2.10.15</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.1-8" date="1670414400">- Add make dependency</changelog>
</package>
<package pkgid="650f1362a67f46cbb7d5842856bf426019f17b058c74b6064b0224257e175ee6" name="obs-api-testsuite-deps" arch="x86_64">
  <version epoch="0" ver="2.10.15" rel="1.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; 2.10.1-4" date="1647864000">- Fix compilation failed due to ruby and some rubygems upgraded</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-5" date="1652356800">- Update xmlhash to 1.3.8</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-6" date="1653393600">- Update Gemfile.lock factory_bot-6.2.1 and pry-0.13.1 and pry-byebug-3.9.0</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; 2.10.1-7" date="1666872000">- Update gem version for obs-server 2.10.15</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.1-8" date="1670414400">- Add make dependency</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 2.10.1-9" date="1675425600">- Add components that are missing from the source package</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-10" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.10.1-11" date="1693224000">- add loongarch64 support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.10.15-1" date="1700568000">- Replace Gemfile with commit a39f185b53492d2207e9b2c0437fd7d407b864f3</changelog>
</package>
<package pkgid="f778af169b3b3779a06ff08fe014f42ead6617e4f5d04d3530207ff85bc9ff63" name="obs-bundled-gems" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="10.oe2203sp1"/>
  <changelog author="zhaomengchao &lt;zhaomengchao3@huawei.com&gt; 2.10.1-2" date="1623240000">- fix obs-bundled-gems compilation failed.</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; 2.10.1-3" date="1632398400">- Fix exec permission in ruby/2.5.0/bin, change require to mariadb-server</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; 2.10.1-4" date="1647864000">- Fix compilation failed due to ruby and some rubygems upgraded</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-5" date="1652356800">- Update xmlhash to 1.3.8</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-6" date="1653393600">- Update Gemfile.lock factory_bot-6.2.1 and pry-0.13.1 and pry-byebug-3.9.0</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; 2.10.1-7" date="1666872000">- Update gem version for obs-server 2.10.15</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.1-8" date="1670414400">- Add make dependency</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 2.10.1-9" date="1675425600">- Add components that are missing from the source package</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-10" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
</package>
<package pkgid="0118c50c7dcad6a36e9434c604ab7fef4f0be86c06e9ca700dab81b04288aea7" name="obs-bundled-gems" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="8.oe2203sp1"/>
  <changelog author="zhaomengchao &lt;zhaomengchao3@huawei.com&gt; 2.10.1-2" date="1623240000">- fix obs-bundled-gems compilation failed.</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; 2.10.1-3" date="1632398400">- Fix exec permission in ruby/2.5.0/bin, change require to mariadb-server</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; 2.10.1-4" date="1647864000">- Fix compilation failed due to ruby and some rubygems upgraded</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-5" date="1652356800">- Update xmlhash to 1.3.8</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-6" date="1653393600">- Update Gemfile.lock factory_bot-6.2.1 and pry-0.13.1 and pry-byebug-3.9.0</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; 2.10.1-7" date="1666872000">- Update gem version for obs-server 2.10.15</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.1-8" date="1670414400">- Add make dependency</changelog>
</package>
<package pkgid="c4bb8fbfb644e7be0f6c387ebe5e128d2171b592be4e852629b85d96ece1dce2" name="obs-bundled-gems" arch="x86_64">
  <version epoch="0" ver="2.10.15" rel="1.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; 2.10.1-4" date="1647864000">- Fix compilation failed due to ruby and some rubygems upgraded</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-5" date="1652356800">- Update xmlhash to 1.3.8</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-6" date="1653393600">- Update Gemfile.lock factory_bot-6.2.1 and pry-0.13.1 and pry-byebug-3.9.0</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; 2.10.1-7" date="1666872000">- Update gem version for obs-server 2.10.15</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.1-8" date="1670414400">- Add make dependency</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 2.10.1-9" date="1675425600">- Add components that are missing from the source package</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-10" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.10.1-11" date="1693224000">- add loongarch64 support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.10.15-1" date="1700568000">- Replace Gemfile with commit a39f185b53492d2207e9b2c0437fd7d407b864f3</changelog>
</package>
<package pkgid="6ca5cbac402b9c8a350bbfea7d59aadea8637d0d95c8c60f9ad3133a501c797b" name="obs-common" arch="noarch">
  <version epoch="0" ver="2.10.15" rel="8.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 2.10.11-5" date="1653393600">- Update gems version for fix rpmbuild error</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 2.10.11-6" date="1653566400">- Fix obs-api install warning</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 2.10.15-1" date="1666872000">- Upgrade to version 2.10.15</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 2.10.15-2" date="1668686400">- The keyword openEuler is deleted from the patch name</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.15-3" date="1669636800">- Add make dependency</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.15-4" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-5" date="1685707200">- Add post script to adatp selinux policy</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-6" date="1686830400">- Replace src package with commit a39f185b53492d2207e9b2c0437fd7d407b864f3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-7" date="1687953600">- fix obs-clockwork service start failure</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-8" date="1716206400">- Fix update failure</changelog>
</package>
<package pkgid="2847c7430f06da99509337e4c35e25ef8c8b6d8425d635e47092f280ca7011a2" name="obs-common" arch="noarch">
  <version epoch="0" ver="2.10.15" rel="9.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 2.10.11-6" date="1653566400">- Fix obs-api install warning</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 2.10.15-1" date="1666872000">- Upgrade to version 2.10.15</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 2.10.15-2" date="1668686400">- The keyword openEuler is deleted from the patch name</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.15-3" date="1669636800">- Add make dependency</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.15-4" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-5" date="1685707200">- Add post script to adatp selinux policy</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-6" date="1686830400">- Replace src package with commit a39f185b53492d2207e9b2c0437fd7d407b864f3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-7" date="1687953600">- fix obs-clockwork service start failure</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-8" date="1716206400">- Fix update failure</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-9" date="1716465600">- Clear insignificance infomation when running post script</changelog>
</package>
<package pkgid="4343f82e3a9f10be03baafd1ec15ee9a36f98f311098e7823a17f122d73727e8" name="obs-server" arch="noarch">
  <version epoch="0" ver="2.10.15" rel="8.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 2.10.11-5" date="1653393600">- Update gems version for fix rpmbuild error</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 2.10.11-6" date="1653566400">- Fix obs-api install warning</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 2.10.15-1" date="1666872000">- Upgrade to version 2.10.15</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 2.10.15-2" date="1668686400">- The keyword openEuler is deleted from the patch name</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.15-3" date="1669636800">- Add make dependency</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.15-4" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-5" date="1685707200">- Add post script to adatp selinux policy</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-6" date="1686830400">- Replace src package with commit a39f185b53492d2207e9b2c0437fd7d407b864f3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-7" date="1687953600">- fix obs-clockwork service start failure</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-8" date="1716206400">- Fix update failure</changelog>
</package>
<package pkgid="608af944ae1946047423d1fdaec473a2f54417799d1d65f72c18441bcc07176b" name="obs-server" arch="noarch">
  <version epoch="0" ver="2.10.15" rel="9.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 2.10.11-6" date="1653566400">- Fix obs-api install warning</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 2.10.15-1" date="1666872000">- Upgrade to version 2.10.15</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 2.10.15-2" date="1668686400">- The keyword openEuler is deleted from the patch name</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.15-3" date="1669636800">- Add make dependency</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.15-4" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-5" date="1685707200">- Add post script to adatp selinux policy</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-6" date="1686830400">- Replace src package with commit a39f185b53492d2207e9b2c0437fd7d407b864f3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-7" date="1687953600">- fix obs-clockwork service start failure</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-8" date="1716206400">- Fix update failure</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-9" date="1716465600">- Clear insignificance infomation when running post script</changelog>
</package>
<package pkgid="62d3967e485281e86dc5d777b2252b71630675c2f5dda7f6fdcaf1b76fbcb675" name="oec-hardware" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="0.oe2203sp1"/>
  <changelog author="ylzhangah &lt;zhangyale3@h-partners.com&gt; - 1.1.2-1" date="1662206400">- Fix the status failed in checking oech.service status after stoped oech.service</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-2" date="1662379200">- Fix Check whether the tool is modified failed</changelog>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
</package>
<package pkgid="17ae4c6adbf71d833c70e92ae7dfce18d09130b479a5ff3729dfba634e8868de" name="oec-hardware" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="2.oe2203sp1"/>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-1" date="1686657600">- Add igc dpdk
- Secure_filename to improve input robustness and security
- Correcting bug, self.changed_ Logpath is a string
- Increase the number of network card up detection times
- Resolve the issue of IP configuration failure</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-2" date="1686916800">- Fix import Secure_Filename failure</changelog>
</package>
<package pkgid="d572bef0f6688b040e768671f10f4728cea643a64d1dfe5de1b52f6ad89df3d7" name="oec-hardware" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="0.oe2203sp1"/>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-2" date="1662379200">- Fix Check whether the tool is modified failed</changelog>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
</package>
<package pkgid="6e9462524385253462487b409a76fd2135ea7848bb4dca0251efbbfbc2f605ad" name="oec-hardware" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="1.oe2203sp1"/>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259200">- Add virtual cases
- Resolve IB startup IB_Read_BW service failure issue
- Delete redundant references
- Resolve incorrect type in vgpu result data
- Resolve the issue of getting the kernel source rpm</changelog>
</package>
<package pkgid="01c72fdc44b1820009d2339f7179b5ce70581b5d7d878c33cdad1666b3c9acf6" name="oec-hardware" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259200">- Add virtual cases
- Resolve IB startup IB_Read_BW service failure issue
- Delete redundant references
- Resolve incorrect type in vgpu result data
- Resolve the issue of getting the kernel source rpm</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259201">- Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
- Add fio test cases:read,write,randread,randwrite
- Solve the nvme line break issue in the command line interface
- Fix compilation errors in the make command
- Add Vulkan testcase for nvida GPU
- Resolve the issue of oech server startup failure on version 24.03</changelog>
</package>
<package pkgid="bace709252525e99439b586a7909d111e24aa5c0e5bf1c940b4a1b2d3289dcee" name="oec-hardware-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="0.oe2203sp1"/>
  <changelog author="ylzhangah &lt;zhangyale3@h-partners.com&gt; - 1.1.2-1" date="1662206400">- Fix the status failed in checking oech.service status after stoped oech.service</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-2" date="1662379200">- Fix Check whether the tool is modified failed</changelog>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
</package>
<package pkgid="aa163e2e58742e3b1d77030ef84bb74507743874787189be84c682e4cedb6fe3" name="oec-hardware-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="2.oe2203sp1"/>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-1" date="1686657600">- Add igc dpdk
- Secure_filename to improve input robustness and security
- Correcting bug, self.changed_ Logpath is a string
- Increase the number of network card up detection times
- Resolve the issue of IP configuration failure</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-2" date="1686916800">- Fix import Secure_Filename failure</changelog>
</package>
<package pkgid="9d734fbcc4840c1f7d1cf4c300ef95933f4f2c58abc4b1680fdd80c217eaebd2" name="oec-hardware-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="0.oe2203sp1"/>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-2" date="1662379200">- Fix Check whether the tool is modified failed</changelog>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
</package>
<package pkgid="ca7778afe29f12d04af5a8809c243362ae58236de9943c3b8b65cf8afedced4b" name="oec-hardware-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="1.oe2203sp1"/>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259200">- Add virtual cases
- Resolve IB startup IB_Read_BW service failure issue
- Delete redundant references
- Resolve incorrect type in vgpu result data
- Resolve the issue of getting the kernel source rpm</changelog>
</package>
<package pkgid="8a5364fc02dd80c43ad8ce262e3b17337cf0165a63c188092cfdce3eec05e314" name="oec-hardware-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259200">- Add virtual cases
- Resolve IB startup IB_Read_BW service failure issue
- Delete redundant references
- Resolve incorrect type in vgpu result data
- Resolve the issue of getting the kernel source rpm</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259201">- Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
- Add fio test cases:read,write,randread,randwrite
- Solve the nvme line break issue in the command line interface
- Fix compilation errors in the make command
- Add Vulkan testcase for nvida GPU
- Resolve the issue of oech server startup failure on version 24.03</changelog>
</package>
<package pkgid="35224f4f219dbb046a1b60e8365874375f1cf5b85e264385d3cda236763316da" name="oec-hardware-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="0.oe2203sp1"/>
  <changelog author="ylzhangah &lt;zhangyale3@h-partners.com&gt; - 1.1.2-1" date="1662206400">- Fix the status failed in checking oech.service status after stoped oech.service</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-2" date="1662379200">- Fix Check whether the tool is modified failed</changelog>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
</package>
<package pkgid="67780cea540f62e3c355160ef11f2d91d07681c2631910a4323d2b65636842b6" name="oec-hardware-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="2.oe2203sp1"/>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-1" date="1686657600">- Add igc dpdk
- Secure_filename to improve input robustness and security
- Correcting bug, self.changed_ Logpath is a string
- Increase the number of network card up detection times
- Resolve the issue of IP configuration failure</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-2" date="1686916800">- Fix import Secure_Filename failure</changelog>
</package>
<package pkgid="22223b0acdf70c6e36c8b25d078667c856acf6f1665f184a366e1c31bb6b1e95" name="oec-hardware-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="0.oe2203sp1"/>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-2" date="1662379200">- Fix Check whether the tool is modified failed</changelog>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
</package>
<package pkgid="a8ca415d03bd571e3d17990479ecc1adf9a2972638b9b46bb56086cfcdc8a6dc" name="oec-hardware-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="1.oe2203sp1"/>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259200">- Add virtual cases
- Resolve IB startup IB_Read_BW service failure issue
- Delete redundant references
- Resolve incorrect type in vgpu result data
- Resolve the issue of getting the kernel source rpm</changelog>
</package>
<package pkgid="e16228a6063141418c37f408ea0f0b10af2524207395a123922f9970bca5c682" name="oec-hardware-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259200">- Add virtual cases
- Resolve IB startup IB_Read_BW service failure issue
- Delete redundant references
- Resolve incorrect type in vgpu result data
- Resolve the issue of getting the kernel source rpm</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259201">- Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
- Add fio test cases:read,write,randread,randwrite
- Solve the nvme line break issue in the command line interface
- Fix compilation errors in the make command
- Add Vulkan testcase for nvida GPU
- Resolve the issue of oech server startup failure on version 24.03</changelog>
</package>
<package pkgid="1410d1e655a5cae88bf89bf82c10fb0ff3b3bb4158f7ac2fd6df4f1396ac8559" name="oec-hardware-server" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="0.oe2203sp1"/>
  <changelog author="ylzhangah &lt;zhangyale3@h-partners.com&gt; - 1.1.2-1" date="1662206400">- Fix the status failed in checking oech.service status after stoped oech.service</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-2" date="1662379200">- Fix Check whether the tool is modified failed</changelog>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
</package>
<package pkgid="90c5c9308773e657a8769ffa217988f2127ebb3ec1220062af4e78e818736d10" name="oec-hardware-server" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="2.oe2203sp1"/>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-1" date="1686657600">- Add igc dpdk
- Secure_filename to improve input robustness and security
- Correcting bug, self.changed_ Logpath is a string
- Increase the number of network card up detection times
- Resolve the issue of IP configuration failure</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-2" date="1686916800">- Fix import Secure_Filename failure</changelog>
</package>
<package pkgid="e83c57f9a511c9804fc4af38837998ebc52c126e8ba774a9b9118ab5360301a9" name="oec-hardware-server" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="0.oe2203sp1"/>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-2" date="1662379200">- Fix Check whether the tool is modified failed</changelog>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
</package>
<package pkgid="5a07790c28a5d53381f763ef7750c8f48e045c1f887ab9436b3d235085a318d6" name="oec-hardware-server" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="1.oe2203sp1"/>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259200">- Add virtual cases
- Resolve IB startup IB_Read_BW service failure issue
- Delete redundant references
- Resolve incorrect type in vgpu result data
- Resolve the issue of getting the kernel source rpm</changelog>
</package>
<package pkgid="e986acce82a9239c61b9f8e5252c2a8a0e551bb3ded13d2b9e179cf38b431adc" name="oec-hardware-server" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259200">- Add virtual cases
- Resolve IB startup IB_Read_BW service failure issue
- Delete redundant references
- Resolve incorrect type in vgpu result data
- Resolve the issue of getting the kernel source rpm</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259201">- Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
- Add fio test cases:read,write,randread,randwrite
- Solve the nvme line break issue in the command line interface
- Fix compilation errors in the make command
- Add Vulkan testcase for nvida GPU
- Resolve the issue of oech server startup failure on version 24.03</changelog>
</package>
<package pkgid="d11ec46404d12bec33f602610f94c5f0a24e032d628a7fa5d04c3a38d80c198a" name="oncn-bwm" arch="x86_64">
  <version epoch="0" ver="1.1" rel="1.oe2203sp1"/>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-1" date="1657800000">- init oncn-bwm</changelog>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-2" date="1658318400">- add permission to dir</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-3" date="1668513600">- adapt libbpf-0.8.1</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-4" date="1672056000">- add oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-5" date="1672920000">- update oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.1-1" date="1676462400">- clean code and use securec function</changelog>
</package>
<package pkgid="9d054f3f9d670d17a642832fb09eb81d506f2e64ffac8a42e7335dec23c90a50" name="oncn-bwm" arch="x86_64">
  <version epoch="0" ver="1.1" rel="3.oe2203sp1"/>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-1" date="1657800000">- init oncn-bwm</changelog>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-2" date="1658318400">- add permission to dir</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-3" date="1668513600">- adapt libbpf-0.8.1</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-4" date="1672056000">- add oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-5" date="1672920000">- update oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.1-1" date="1676462400">- clean code and use securec function</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.1-2" date="1684756800">- adapt libbpf-0.8.1: prog_load_xattr will deprecated and use another way to load bpf prog</changelog>
  <changelog author="supercharge &lt;xiesongyang@huawei.com&gt; - 1.1-3" date="1684756801">- fix offline packets block</changelog>
</package>
<package pkgid="91d32b99f074e725cc56a38ec5721d4fc360f74ace8a1d828ec342ed0b331bb3" name="oncn-bwm-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1" rel="1.oe2203sp1"/>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-1" date="1657800000">- init oncn-bwm</changelog>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-2" date="1658318400">- add permission to dir</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-3" date="1668513600">- adapt libbpf-0.8.1</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-4" date="1672056000">- add oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-5" date="1672920000">- update oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.1-1" date="1676462400">- clean code and use securec function</changelog>
</package>
<package pkgid="d85c11a2256fe7ee53dab9837af3b441e43907ec0b475150ab629f71f677d406" name="oncn-bwm-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1" rel="3.oe2203sp1"/>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-1" date="1657800000">- init oncn-bwm</changelog>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-2" date="1658318400">- add permission to dir</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-3" date="1668513600">- adapt libbpf-0.8.1</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-4" date="1672056000">- add oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-5" date="1672920000">- update oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.1-1" date="1676462400">- clean code and use securec function</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.1-2" date="1684756800">- adapt libbpf-0.8.1: prog_load_xattr will deprecated and use another way to load bpf prog</changelog>
  <changelog author="supercharge &lt;xiesongyang@huawei.com&gt; - 1.1-3" date="1684756801">- fix offline packets block</changelog>
</package>
<package pkgid="c5ccdead1029ebf2951ba8e7a0a876f3812c59d36e21ce3f473e1f8646ed2a3d" name="oncn-bwm-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1" rel="1.oe2203sp1"/>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-1" date="1657800000">- init oncn-bwm</changelog>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-2" date="1658318400">- add permission to dir</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-3" date="1668513600">- adapt libbpf-0.8.1</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-4" date="1672056000">- add oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-5" date="1672920000">- update oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.1-1" date="1676462400">- clean code and use securec function</changelog>
</package>
<package pkgid="45e0fe400cf579e5d35c92b071e4720fe58a5e275ed6079e7602577b4f464370" name="oncn-bwm-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1" rel="3.oe2203sp1"/>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-1" date="1657800000">- init oncn-bwm</changelog>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-2" date="1658318400">- add permission to dir</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-3" date="1668513600">- adapt libbpf-0.8.1</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-4" date="1672056000">- add oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-5" date="1672920000">- update oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.1-1" date="1676462400">- clean code and use securec function</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.1-2" date="1684756800">- adapt libbpf-0.8.1: prog_load_xattr will deprecated and use another way to load bpf prog</changelog>
  <changelog author="supercharge &lt;xiesongyang@huawei.com&gt; - 1.1-3" date="1684756801">- fix offline packets block</changelog>
</package>
<package pkgid="f177337b69b812da57e9deb899bf5f039301163eed798b8278e70ed12460521a" name="oncn-bwm-devel" arch="x86_64">
  <version epoch="0" ver="1.1" rel="1.oe2203sp1"/>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-1" date="1657800000">- init oncn-bwm</changelog>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-2" date="1658318400">- add permission to dir</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-3" date="1668513600">- adapt libbpf-0.8.1</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-4" date="1672056000">- add oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-5" date="1672920000">- update oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.1-1" date="1676462400">- clean code and use securec function</changelog>
</package>
<package pkgid="265f7d07dc3b8cb5c57c14cff06977dd6f3d94bda808c8b768e175f0de87096f" name="oncn-bwm-devel" arch="x86_64">
  <version epoch="0" ver="1.1" rel="3.oe2203sp1"/>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-1" date="1657800000">- init oncn-bwm</changelog>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-2" date="1658318400">- add permission to dir</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-3" date="1668513600">- adapt libbpf-0.8.1</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-4" date="1672056000">- add oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-5" date="1672920000">- update oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.1-1" date="1676462400">- clean code and use securec function</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.1-2" date="1684756800">- adapt libbpf-0.8.1: prog_load_xattr will deprecated and use another way to load bpf prog</changelog>
  <changelog author="supercharge &lt;xiesongyang@huawei.com&gt; - 1.1-3" date="1684756801">- fix offline packets block</changelog>
</package>
<package pkgid="5cfe70538beae3f93c58986cfc4e05eadac09671dbe2c24731f158499e764568" name="open-iscsi" arch="x86_64">
  <version epoch="0" ver="2.1.5" rel="14.oe2203sp1"/>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-8" date="1655985600">- Remove unused fwparam_ibft.[ch] files in fwparam_ibft</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-9" date="1664280000">- Substitute self-developed patch with mainline patch</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-10" date="1669982400">- Backport bugfix patches from mainline</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-11" date="1673956800">- iscsid: clear scanning thread's PR_SET_IO_FLUSHER flag</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-12" date="1673956801">- iscsid: stop connection for recovery if error is not timeout in iscsi_login_eh</changelog>
  <changelog author="louhongxiang &lt;louhongxiang@huawei.com&gt; - 2.1.5-13" date="1687694400">- iscsid: fix format overflow warning.</changelog>
  <changelog author="jiangjianjun &lt;jiangjianjun3@huawei.com&gt; - 2.1.5-14" date="1708430400">- update open-iscsi.spec</changelog>
</package>
<package pkgid="7b18e9e378a5b75d563287153f1c2139042c3087b01d892f46f413c4dd2b78ce" name="open-iscsi-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.5" rel="14.oe2203sp1"/>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-8" date="1655985600">- Remove unused fwparam_ibft.[ch] files in fwparam_ibft</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-9" date="1664280000">- Substitute self-developed patch with mainline patch</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-10" date="1669982400">- Backport bugfix patches from mainline</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-11" date="1673956800">- iscsid: clear scanning thread's PR_SET_IO_FLUSHER flag</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-12" date="1673956801">- iscsid: stop connection for recovery if error is not timeout in iscsi_login_eh</changelog>
  <changelog author="louhongxiang &lt;louhongxiang@huawei.com&gt; - 2.1.5-13" date="1687694400">- iscsid: fix format overflow warning.</changelog>
  <changelog author="jiangjianjun &lt;jiangjianjun3@huawei.com&gt; - 2.1.5-14" date="1708430400">- update open-iscsi.spec</changelog>
</package>
<package pkgid="bcc2353edcf541d09c440cc0222f5d595fd153eeddce639bfbca92e8a24eb4f2" name="open-iscsi-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.5" rel="14.oe2203sp1"/>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-8" date="1655985600">- Remove unused fwparam_ibft.[ch] files in fwparam_ibft</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-9" date="1664280000">- Substitute self-developed patch with mainline patch</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-10" date="1669982400">- Backport bugfix patches from mainline</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-11" date="1673956800">- iscsid: clear scanning thread's PR_SET_IO_FLUSHER flag</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-12" date="1673956801">- iscsid: stop connection for recovery if error is not timeout in iscsi_login_eh</changelog>
  <changelog author="louhongxiang &lt;louhongxiang@huawei.com&gt; - 2.1.5-13" date="1687694400">- iscsid: fix format overflow warning.</changelog>
  <changelog author="jiangjianjun &lt;jiangjianjun3@huawei.com&gt; - 2.1.5-14" date="1708430400">- update open-iscsi.spec</changelog>
</package>
<package pkgid="2c4e1f45d5469c81eb2d3b38be978682b1a0a58d7a602cfe723b9a5ebf276961" name="open-iscsi-devel" arch="x86_64">
  <version epoch="0" ver="2.1.5" rel="14.oe2203sp1"/>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-8" date="1655985600">- Remove unused fwparam_ibft.[ch] files in fwparam_ibft</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-9" date="1664280000">- Substitute self-developed patch with mainline patch</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-10" date="1669982400">- Backport bugfix patches from mainline</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-11" date="1673956800">- iscsid: clear scanning thread's PR_SET_IO_FLUSHER flag</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-12" date="1673956801">- iscsid: stop connection for recovery if error is not timeout in iscsi_login_eh</changelog>
  <changelog author="louhongxiang &lt;louhongxiang@huawei.com&gt; - 2.1.5-13" date="1687694400">- iscsid: fix format overflow warning.</changelog>
  <changelog author="jiangjianjun &lt;jiangjianjun3@huawei.com&gt; - 2.1.5-14" date="1708430400">- update open-iscsi.spec</changelog>
</package>
<package pkgid="e9c3f019725be1e6b4e804f87641e11dce476e25b78ec5ef5ef4bad08aad3dc5" name="open-iscsi-help" arch="x86_64">
  <version epoch="0" ver="2.1.5" rel="14.oe2203sp1"/>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-8" date="1655985600">- Remove unused fwparam_ibft.[ch] files in fwparam_ibft</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-9" date="1664280000">- Substitute self-developed patch with mainline patch</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-10" date="1669982400">- Backport bugfix patches from mainline</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-11" date="1673956800">- iscsid: clear scanning thread's PR_SET_IO_FLUSHER flag</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-12" date="1673956801">- iscsid: stop connection for recovery if error is not timeout in iscsi_login_eh</changelog>
  <changelog author="louhongxiang &lt;louhongxiang@huawei.com&gt; - 2.1.5-13" date="1687694400">- iscsid: fix format overflow warning.</changelog>
  <changelog author="jiangjianjun &lt;jiangjianjun3@huawei.com&gt; - 2.1.5-14" date="1708430400">- update open-iscsi.spec</changelog>
</package>
<package pkgid="7052cdf474475f916630fc8df0f48dab8cfecfab4351d5e1ea1a15559bfdea6b" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="3.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
</package>
<package pkgid="ecca9ab11a8f8f789b31be13b2af0c8d6d9540aa048bac8ad19905bfdc526725" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="4.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-4" date="1699876800">- Fix CVE-2023-34058 CVE-2023-34059</changelog>
</package>
<package pkgid="9e21ca24763ba058f46a69965466bb585c8ce5710f5fdd8baf373e522a3508a5" name="open-vm-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="3.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
</package>
<package pkgid="30f149a140784f9f7b95678844786c72fe714918c818240f2c7296d8ff12f22b" name="open-vm-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="4.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-4" date="1699876800">- Fix CVE-2023-34058 CVE-2023-34059</changelog>
</package>
<package pkgid="436fc4b425f084b26d93320305986c55a5bc4b0c4c01d0e4746cce75be74cbe2" name="open-vm-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="3.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
</package>
<package pkgid="f943dca3966005fb6a2b0db38a09ea2107e4de4621f40dab3ec11dc5da568c3f" name="open-vm-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="4.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-4" date="1699876800">- Fix CVE-2023-34058 CVE-2023-34059</changelog>
</package>
<package pkgid="d1ccd33eb063b67149840f5b8149c1b7d708ce248953174523b4c8fabd051ece" name="open-vm-tools-desktop" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="3.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
</package>
<package pkgid="ed1ed0b0fdb8b428c9245886436d748103da5b71018a019ed2b3d8bcfeae11f4" name="open-vm-tools-desktop" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="4.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-4" date="1699876800">- Fix CVE-2023-34058 CVE-2023-34059</changelog>
</package>
<package pkgid="1f3b8cb2d9b01738f1a8b7e70684c877df1042c0ea852197bf677146a667c8f9" name="open-vm-tools-devel" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="3.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
</package>
<package pkgid="d6a7aa507855c2ceac7e1a8ab66767334dc2e87206275ece6697e26e80f9d4cb" name="open-vm-tools-devel" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="4.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-4" date="1699876800">- Fix CVE-2023-34058 CVE-2023-34059</changelog>
</package>
<package pkgid="de97afa6851a7c601e7231834c8899d5cc4c1bf6bf49a0a97e3a38af28965f73" name="open-vm-tools-salt-minion" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="3.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
</package>
<package pkgid="694a448843eb95f9caa39372cc10cdeb81d4fdba28c0946e9b18d836f0ef4f70" name="open-vm-tools-salt-minion" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="4.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-4" date="1699876800">- Fix CVE-2023-34058 CVE-2023-34059</changelog>
</package>
<package pkgid="aae686bc58a3018310353ecd4a885c5de8a1e4e0bdd23fab9de2ce6d43e51acb" name="open-vm-tools-sdmp" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="3.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
</package>
<package pkgid="8e229e05f4b2407b6b7da0b74b38b0d127e6a6c29a3df662ad82f768c255893f" name="open-vm-tools-sdmp" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="4.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-4" date="1699876800">- Fix CVE-2023-34058 CVE-2023-34059</changelog>
</package>
<package pkgid="a9a0765f22e5e32b9b7426a94488d318657378e06df5deb0b888e2e3985c7b48" name="open-vm-tools-test" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="3.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
</package>
<package pkgid="70004421c6e11f21e96ea0df08a8695f064f72db0d0fd752f00defabf5137710" name="open-vm-tools-test" arch="x86_64">
  <version epoch="0" ver="12.0.5" rel="4.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-4" date="1699876800">- Fix CVE-2023-34058 CVE-2023-34059</changelog>
</package>
<package pkgid="6a988267e350878cbb1cb6c1f26e2e731a119f285a2d61b2ca6b2fde60c95f93" name="openEuler-gpg-keys" arch="x86_64">
  <version epoch="0" ver="1.0" rel="3.6.oe2203sp1"/>
  <changelog author="wangchong &lt;wangchong56@huawei.com&gt; - 1.0-3.2" date="1633694400">- Type:NA
- ID:NA
- SUG:NA
- DESC:fix EPOL repo error</changelog>
  <changelog author="wangchong &lt;wangchong56@huawei.com&gt; - 1.0-3.3" date="1642248000">- Type:NA
- ID:NA
- SUG:NA
- DESC:modify repo</changelog>
  <changelog author="wangchong &lt;wangchong56@huawei.com&gt; - 1.0-3.4" date="1668772800">- Type:NA
- ID:NA
- SUG:NA
- DESC:modify repo</changelog>
  <changelog author="CaoXueliang &lt;caoxl78320@163.com&gt; - 1.0-3.5" date="1670068800">- Type:NA
- ID:NA
- SUG:NA
- DESC: add RPM-GPG-KEY-EBS</changelog>
  <changelog author="jufangqun &lt;jufangqun@huawei.com&gt; - 1.0-3.6" date="1693483200">- Type:NA
- ID:NA
- SUG:NA
- DESC: configure metalink in repo</changelog>
</package>
<package pkgid="c8c01756881e0975f6a41bdfc64cc6c4de2dda830901d93163941ce0e049f0a6" name="openEuler-release" arch="x86_64">
  <version epoch="0" ver="22.03LTS_SP1" rel="57.oe2203sp1"/>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 1.0-52" date="1657886400">- Update EULA license for donate</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1.0-53" date="1667908800">- sysconfig parameters have a impact on performance,comment out the relevant content</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1.0-54" date="1667908801">- delete color.sh</changelog>
  <changelog author="wangchong &lt;wangchong56@huawei.com&gt; - 1.0-55" date="1668772800">- modify generic_patch_level_extend</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.0-56" date="1670846400">- Delete package openEuler-performance</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.0-57" date="1716206400">- Delete Processes print</changelog>
</package>
<package pkgid="cdb538f4581d45796fe6d929f0c447a94dc7546e36b384cf8598cf41525d6a62" name="openEuler-repos" arch="x86_64">
  <version epoch="0" ver="1.0" rel="3.6.oe2203sp1"/>
  <changelog author="wangchong &lt;wangchong56@huawei.com&gt; - 1.0-3.2" date="1633694400">- Type:NA
- ID:NA
- SUG:NA
- DESC:fix EPOL repo error</changelog>
  <changelog author="wangchong &lt;wangchong56@huawei.com&gt; - 1.0-3.3" date="1642248000">- Type:NA
- ID:NA
- SUG:NA
- DESC:modify repo</changelog>
  <changelog author="wangchong &lt;wangchong56@huawei.com&gt; - 1.0-3.4" date="1668772800">- Type:NA
- ID:NA
- SUG:NA
- DESC:modify repo</changelog>
  <changelog author="CaoXueliang &lt;caoxl78320@163.com&gt; - 1.0-3.5" date="1670068800">- Type:NA
- ID:NA
- SUG:NA
- DESC: add RPM-GPG-KEY-EBS</changelog>
  <changelog author="jufangqun &lt;jufangqun@huawei.com&gt; - 1.0-3.6" date="1693483200">- Type:NA
- ID:NA
- SUG:NA
- DESC: configure metalink in repo</changelog>
</package>
<package pkgid="567f9faf41f38c553e60c584f024c52208be4fbcc364e35a1ebe470153d8d28e" name="opengauss" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="8.oe2203sp1"/>
  <changelog author="zhangxubo &lt;zhangxubo1@huawei.com&gt; - 2.1.0-1" date="1638360000">- Package init</changelog>
  <changelog author="zhangxubo &lt;zhangxubo1@huawei.com&gt; - 2.1.0-2" date="1639396800">- Fix bugs: Mask dependencies acquired during installation</changelog>
  <changelog author="zhangxubo &lt;zhangxubo1@huawei.com&gt; - 2.1.0-3" date="1642852800">- Fix bugs: #I4RVNX</changelog>
  <changelog author="zhangxubo &lt;zhangxubo1@huawei.com&gt; - 2.1.0-4" date="1643284800">- Fix bugs: #I4SDWX</changelog>
  <changelog author="zhangxubo &lt;zhangxubo1@huawei.com&gt; - 2.1.0-5" date="1647086400">- Fix bugs: #I4VDYQ #I4V624 #I4UOUU #I4TCDB #I4TCB8</changelog>
  <changelog author="ouyangminxiang &lt;ouyangminxiang@kylinsec.com.cn&gt; - 2.1.0-6" date="1648641600">- add kylinsec platform</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.1.0-7" date="1681128000">- add /etc/kylinsec-release support for KylinSec</changelog>
  <changelog author="dillon chen&lt;dillon.chen@gmail.com&gt; -2.1.0-8" date="1686052800">- Fix bugs: #I677QX； add lsof</changelog>
</package>
<package pkgid="ff60f0bf85372e27242585d91f3216e5dd70e4cc454883a126c2f0db46b833c5" name="openjfx8" arch="x86_64">
  <version epoch="0" ver="8u370" rel="1.oe2203sp1"/>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 8.0.202-26.b07" date="1626004800">- add openjfx8.yaml</changelog>
  <changelog author="Noah &lt;hedongbo@huawei.com&gt; - 8.0,202-26.b07" date="1626868800">- change maven repository to huawei cloud</changelog>
  <changelog author="Noah &lt;hedongbo@huawei.com&gt; - 8u330.1" date="1657627200">- change upstream to openeuler
- rm 0004-Fix-Compilation-Flags.patch
- rm 0005-fxpackager-extract-jre-accept-symlink.patch
- rm 0003-fix-cast-between-incompatible-function-types.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 8u340.1" date="1658232000">- update sqlite from 3.35.3 to 3.37.2</changelog>
  <changelog author="douyiwang &lt;douyiwang@huawei.com&gt; - 8u352.1" date="1670414400">- update 8u340.tar.bz to 8u352.tar.gz</changelog>
  <changelog author="douyiwang &lt;douyiwang@huawei.com&gt; - 8u353.1" date="1670846400">- update 8u352.tar.bz to 8u353.tar.gz</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 8u370.1" date="1687262400">- update 8u353.tar.gz to 8u370.tar.gz</changelog>
</package>
<package pkgid="23091277aa587dc962f8510fdd515adcb6d354574fa01a043054ac9bc3125987" name="openjfx8-devel" arch="x86_64">
  <version epoch="0" ver="8u370" rel="1.oe2203sp1"/>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 8.0.202-26.b07" date="1626004800">- add openjfx8.yaml</changelog>
  <changelog author="Noah &lt;hedongbo@huawei.com&gt; - 8.0,202-26.b07" date="1626868800">- change maven repository to huawei cloud</changelog>
  <changelog author="Noah &lt;hedongbo@huawei.com&gt; - 8u330.1" date="1657627200">- change upstream to openeuler
- rm 0004-Fix-Compilation-Flags.patch
- rm 0005-fxpackager-extract-jre-accept-symlink.patch
- rm 0003-fix-cast-between-incompatible-function-types.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 8u340.1" date="1658232000">- update sqlite from 3.35.3 to 3.37.2</changelog>
  <changelog author="douyiwang &lt;douyiwang@huawei.com&gt; - 8u352.1" date="1670414400">- update 8u340.tar.bz to 8u352.tar.gz</changelog>
  <changelog author="douyiwang &lt;douyiwang@huawei.com&gt; - 8u353.1" date="1670846400">- update 8u352.tar.bz to 8u353.tar.gz</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 8u370.1" date="1687262400">- update 8u353.tar.gz to 8u370.tar.gz</changelog>
</package>
<package pkgid="2e30187d6ab97599f28edb60d89010318d93f474a58b0ecb697d2c45235c8cba" name="openjfx8-javadoc" arch="x86_64">
  <version epoch="0" ver="8u370" rel="1.oe2203sp1"/>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 8.0.202-26.b07" date="1626004800">- add openjfx8.yaml</changelog>
  <changelog author="Noah &lt;hedongbo@huawei.com&gt; - 8.0,202-26.b07" date="1626868800">- change maven repository to huawei cloud</changelog>
  <changelog author="Noah &lt;hedongbo@huawei.com&gt; - 8u330.1" date="1657627200">- change upstream to openeuler
- rm 0004-Fix-Compilation-Flags.patch
- rm 0005-fxpackager-extract-jre-accept-symlink.patch
- rm 0003-fix-cast-between-incompatible-function-types.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 8u340.1" date="1658232000">- update sqlite from 3.35.3 to 3.37.2</changelog>
  <changelog author="douyiwang &lt;douyiwang@huawei.com&gt; - 8u352.1" date="1670414400">- update 8u340.tar.bz to 8u352.tar.gz</changelog>
  <changelog author="douyiwang &lt;douyiwang@huawei.com&gt; - 8u353.1" date="1670846400">- update 8u352.tar.bz to 8u353.tar.gz</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 8u370.1" date="1687262400">- update 8u353.tar.gz to 8u370.tar.gz</changelog>
</package>
<package pkgid="7f405d28d829c6e48fbd5e7e051ed3adba49ada3df54a4e634b9cda49a831365" name="openldap" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
</package>
<package pkgid="c0b93441ea4fd1200bdfa97e37303bc6ff6dbfea763759dd176cbbf3d9fcd41d" name="openldap" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
</package>
<package pkgid="3de33324dc4e6c9f7dbaeefa14fcbe79cdcef63e527464fb3425515f771ec5db" name="openldap" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 2.6.0-7" date="1690200000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix empty soft link</changelog>
</package>
<package pkgid="6b08703af02815ad189161ed4b6b71728a4ab7705ccbec0804916cb4f85deca2" name="openldap-clients" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
</package>
<package pkgid="d3abdb111da0cea1b5e9a109f5c74ef3641a2c912964d922057560427cfd27ce" name="openldap-clients" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
</package>
<package pkgid="5ef2f827f0e6051b5ebad6ba677e5c95e3afa85f75aec4bf54d0f4ba3a30eabb" name="openldap-clients" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 2.6.0-7" date="1690200000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix empty soft link</changelog>
</package>
<package pkgid="5f423304396f99aaa0adbc8ca4d09dd8eafe07927f2dc5dd76c843e3a0d0ec43" name="openldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
</package>
<package pkgid="35dafc8e588e6681de48c8c8c223694758af46d5c850ceed9ba9b1b598f64f0d" name="openldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
</package>
<package pkgid="d27b4d24bb2619a660337eb45574951758dd6b83983bdd831fff61c29f51f84d" name="openldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 2.6.0-7" date="1690200000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix empty soft link</changelog>
</package>
<package pkgid="d85a0b49aa7795c38ff9f614e6624756a8594a8125d9a9061842f0f3264db096" name="openldap-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
</package>
<package pkgid="2105a5b9eee3e1bfc452e5035e88ee119f0f399eb061bc60ec4f80967a02f589" name="openldap-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
</package>
<package pkgid="0b9c7cd0d9b345574131390f48e5cbb1063e01dcdf71d62dde16c729bdcb8f58" name="openldap-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 2.6.0-7" date="1690200000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix empty soft link</changelog>
</package>
<package pkgid="b15878fa898ce3ff6e5c21ffcbf01a8ba47f10b132ffe9daf3fd5604207802dd" name="openldap-devel" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
</package>
<package pkgid="ed6468a31c5caa2872306d32427ade0fa489a3501f98c73e338ef99ac6cfbd27" name="openldap-devel" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
</package>
<package pkgid="308ed25cc1dcf4e8e800ab7c1f6b8f5ce8517d56cabd3d68c9874b4b26fdfbfe" name="openldap-devel" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 2.6.0-7" date="1690200000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix empty soft link</changelog>
</package>
<package pkgid="fb265c67e50279106923f63833881fde2756817ef110079eac7bb85b4df2a3b2" name="openldap-help" arch="noarch">
  <version epoch="0" ver="2.6.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
</package>
<package pkgid="aecab52b482e93ba4bbc65a10d86f4196133670967a25972b7b631db6ac63a90" name="openldap-help" arch="noarch">
  <version epoch="0" ver="2.6.0" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
</package>
<package pkgid="4c47e6246bee1f2a008299c3f9dc9e2a27ecfd68f60a44f3b4230ab73b4d0499" name="openldap-help" arch="noarch">
  <version epoch="0" ver="2.6.0" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 2.6.0-7" date="1690200000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix empty soft link</changelog>
</package>
<package pkgid="378d465db15a837678eec60f6da6bb66c4aae2e3d8aac6cb8b3cb636b681a7f9" name="openldap-servers" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
</package>
<package pkgid="4c6e7727dbafbd093269ac3967d7667903a991484a8421497c7a854495923fe1" name="openldap-servers" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
</package>
<package pkgid="3274ffe0ce3c0054c8842fef8f758bea036181222fd3ea3654b79bbef0f40dc5" name="openldap-servers" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 2.6.0-7" date="1690200000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix empty soft link</changelog>
</package>
<package pkgid="24a52aad919d8950bd8a73fb76faf92ffc18b3f7c1b3613c9a9169f4288d641b" name="openmpi" arch="x86_64">
  <version epoch="0" ver="4.1.4" rel="3.oe2203sp1"/>
  <changelog author="Pengju Jiang &lt;jiangpengju2@huawei.com&gt; - 2.1.1-20" date="1631188800">- solve the strip and rpath problem of safe conversion</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 4.1.4-1" date="1655726400">- Upgrade to 4.1.1</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 4.1.4-2" date="1659096000">- Reslove conflict with pmix-devel and update license</changelog>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 4.1.4-3" date="1692187200">- Modify the /usr/lib64/openmpi/bin path to /usr/bin</changelog>
</package>
<package pkgid="c16e94188fca974332a6d51dcdc1b7a5b3a3ce62f782125e7624ebf37977f85c" name="openmpi-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.4" rel="3.oe2203sp1"/>
  <changelog author="Pengju Jiang &lt;jiangpengju2@huawei.com&gt; - 2.1.1-20" date="1631188800">- solve the strip and rpath problem of safe conversion</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 4.1.4-1" date="1655726400">- Upgrade to 4.1.1</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 4.1.4-2" date="1659096000">- Reslove conflict with pmix-devel and update license</changelog>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 4.1.4-3" date="1692187200">- Modify the /usr/lib64/openmpi/bin path to /usr/bin</changelog>
</package>
<package pkgid="ca6845df87613c889f0519459b2ce7633dd4dc4e2ff8ad7626eaee18cd46b3b6" name="openmpi-debugsource" arch="x86_64">
  <version epoch="0" ver="4.1.4" rel="3.oe2203sp1"/>
  <changelog author="Pengju Jiang &lt;jiangpengju2@huawei.com&gt; - 2.1.1-20" date="1631188800">- solve the strip and rpath problem of safe conversion</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 4.1.4-1" date="1655726400">- Upgrade to 4.1.1</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 4.1.4-2" date="1659096000">- Reslove conflict with pmix-devel and update license</changelog>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 4.1.4-3" date="1692187200">- Modify the /usr/lib64/openmpi/bin path to /usr/bin</changelog>
</package>
<package pkgid="4d5328f074a06349abbd3e3dab2685e99da91f2a69c65d2936be72c8443b7088" name="openmpi-devel" arch="x86_64">
  <version epoch="0" ver="4.1.4" rel="3.oe2203sp1"/>
  <changelog author="Pengju Jiang &lt;jiangpengju2@huawei.com&gt; - 2.1.1-20" date="1631188800">- solve the strip and rpath problem of safe conversion</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 4.1.4-1" date="1655726400">- Upgrade to 4.1.1</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 4.1.4-2" date="1659096000">- Reslove conflict with pmix-devel and update license</changelog>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 4.1.4-3" date="1692187200">- Modify the /usr/lib64/openmpi/bin path to /usr/bin</changelog>
</package>
<package pkgid="8126386770896d667dda8207a2c312190da52d8f2aa6b828304f07a628b25572" name="openmpi-help" arch="x86_64">
  <version epoch="0" ver="4.1.4" rel="3.oe2203sp1"/>
  <changelog author="Pengju Jiang &lt;jiangpengju2@huawei.com&gt; - 2.1.1-20" date="1631188800">- solve the strip and rpath problem of safe conversion</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 4.1.4-1" date="1655726400">- Upgrade to 4.1.1</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 4.1.4-2" date="1659096000">- Reslove conflict with pmix-devel and update license</changelog>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 4.1.4-3" date="1692187200">- Modify the /usr/lib64/openmpi/bin path to /usr/bin</changelog>
</package>
<package pkgid="3cc30d8d4e485dee6a3ec666c4f2f7adc112fc62d32ca56ea1f64cb17e7f0814" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="18.oe2203sp1"/>
  <changelog author="duyiwei&lt;duyiwei@kylinos.cn&gt; - 8.8P1-9" date="1670414400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable "include /etc/ssh/sshd_config.d/*.config" again</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-10" date="1670932800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-11" date="1670932801">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-12" date="1670932802">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-13" date="1670932803">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add strict scp check for CVE-2020-15778</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
</package>
<package pkgid="397e203943934ddb942b7f688fe5d1ac7f8c42e0960ceb768d55fc4bf4f4097c" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="23.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
</package>
<package pkgid="26fe805f0e8cae3097ec4cd72cb763dc6fe6b6ff11a0414698ee509c19ec5684" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="25.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-24" date="1692100800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:In channel_request_remote_forwarding the parameters</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-25" date="1703332800">- Type:CVE
- CVE:CVE-2023-48795,CVE-2023-51385
- SUG:NA
- DESC:fix CVE-2023-48795 and CVE-2023-51385</changelog>
</package>
<package pkgid="c023caf685fc964cdfa2803f986a3adf73e07d78bf579a83f47e1abe342aa6e6" name="openssh-askpass" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="18.oe2203sp1"/>
  <changelog author="duyiwei&lt;duyiwei@kylinos.cn&gt; - 8.8P1-9" date="1670414400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable "include /etc/ssh/sshd_config.d/*.config" again</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-10" date="1670932800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-11" date="1670932801">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-12" date="1670932802">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-13" date="1670932803">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add strict scp check for CVE-2020-15778</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
</package>
<package pkgid="a5726ff2b65ae26079a9dcd3a1d49c5ff32709ba34d4409ddb0e86d00c293c82" name="openssh-askpass" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="23.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
</package>
<package pkgid="d69bb44bf8fd3b546c867e852e4f42621e59220de6834b2ee781c2c431c02a36" name="openssh-askpass" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="25.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-24" date="1692100800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:In channel_request_remote_forwarding the parameters</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-25" date="1703332800">- Type:CVE
- CVE:CVE-2023-48795,CVE-2023-51385
- SUG:NA
- DESC:fix CVE-2023-48795 and CVE-2023-51385</changelog>
</package>
<package pkgid="3e693215b8b2cc491a2a626329c00b42f16c9d516bb6e0ace161f4b4ece05401" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="18.oe2203sp1"/>
  <changelog author="duyiwei&lt;duyiwei@kylinos.cn&gt; - 8.8P1-9" date="1670414400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable "include /etc/ssh/sshd_config.d/*.config" again</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-10" date="1670932800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-11" date="1670932801">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-12" date="1670932802">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-13" date="1670932803">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add strict scp check for CVE-2020-15778</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
</package>
<package pkgid="d12f5572d500ad8f8a7596912989f2e2e01eb238233b15d6bb4f597d272d91a7" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="23.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
</package>
<package pkgid="472afaf1a8409f7c78d1e8113ab8a36ec4736e9cbd937dc30cdcaeb3cf0eb8a2" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="25.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-24" date="1692100800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:In channel_request_remote_forwarding the parameters</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-25" date="1703332800">- Type:CVE
- CVE:CVE-2023-48795,CVE-2023-51385
- SUG:NA
- DESC:fix CVE-2023-48795 and CVE-2023-51385</changelog>
</package>
<package pkgid="f47864fa86124eb9b9c610bb680436885feee96e3e0b6291c7f137c68fb5f09a" name="openssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="18.oe2203sp1"/>
  <changelog author="duyiwei&lt;duyiwei@kylinos.cn&gt; - 8.8P1-9" date="1670414400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable "include /etc/ssh/sshd_config.d/*.config" again</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-10" date="1670932800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-11" date="1670932801">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-12" date="1670932802">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-13" date="1670932803">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add strict scp check for CVE-2020-15778</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
</package>
<package pkgid="673039c52d4e980e4977301c00b0678ad0a1b800315ae61e7c81ac3f6d52c6f9" name="openssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="23.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
</package>
<package pkgid="fe9d28b06a5eb14a6aaa6e35bd4ecfc385634accabcc9a25ad5a52d407639bb4" name="openssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="25.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-24" date="1692100800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:In channel_request_remote_forwarding the parameters</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-25" date="1703332800">- Type:CVE
- CVE:CVE-2023-48795,CVE-2023-51385
- SUG:NA
- DESC:fix CVE-2023-48795 and CVE-2023-51385</changelog>
</package>
<package pkgid="6f870a0f394b65e92c0e8492d8acf790cb4bd834f67ad1c71a4b59042a4d8a38" name="openssh-debugsource" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="18.oe2203sp1"/>
  <changelog author="duyiwei&lt;duyiwei@kylinos.cn&gt; - 8.8P1-9" date="1670414400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable "include /etc/ssh/sshd_config.d/*.config" again</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-10" date="1670932800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-11" date="1670932801">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-12" date="1670932802">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-13" date="1670932803">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add strict scp check for CVE-2020-15778</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
</package>
<package pkgid="e836118c342df05bb3ebbe7ce4840658506a092048e1aa82d702001dc1ef1180" name="openssh-debugsource" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="23.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
</package>
<package pkgid="ba533ed4aa4b0354ae637a66ea1afee4cd6246e7280ed56658dfade4649de363" name="openssh-debugsource" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="25.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-24" date="1692100800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:In channel_request_remote_forwarding the parameters</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-25" date="1703332800">- Type:CVE
- CVE:CVE-2023-48795,CVE-2023-51385
- SUG:NA
- DESC:fix CVE-2023-48795 and CVE-2023-51385</changelog>
</package>
<package pkgid="c9ec1fd8a3fea3cdb35fa9bb79293f097a854bde6c3db9dda63473557490e119" name="openssh-help" arch="noarch">
  <version epoch="0" ver="8.8p1" rel="18.oe2203sp1"/>
  <changelog author="duyiwei&lt;duyiwei@kylinos.cn&gt; - 8.8P1-9" date="1670414400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable "include /etc/ssh/sshd_config.d/*.config" again</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-10" date="1670932800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-11" date="1670932801">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-12" date="1670932802">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-13" date="1670932803">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add strict scp check for CVE-2020-15778</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
</package>
<package pkgid="ec7d40321f80b1c9a487a9ab0fa8a2af5471b16185240f503f045c8d9306dd8a" name="openssh-help" arch="noarch">
  <version epoch="0" ver="8.8p1" rel="23.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
</package>
<package pkgid="c952342aff888c6bbefc0530ea16858110e9b385c24d286ceff3bc2502cb5d89" name="openssh-help" arch="noarch">
  <version epoch="0" ver="8.8p1" rel="25.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-24" date="1692100800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:In channel_request_remote_forwarding the parameters</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-25" date="1703332800">- Type:CVE
- CVE:CVE-2023-48795,CVE-2023-51385
- SUG:NA
- DESC:fix CVE-2023-48795 and CVE-2023-51385</changelog>
</package>
<package pkgid="10d5846281a35efcd1e2b50af265f52098d5c31fb1516d60524139195a76bec2" name="openssh-keycat" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="18.oe2203sp1"/>
  <changelog author="duyiwei&lt;duyiwei@kylinos.cn&gt; - 8.8P1-9" date="1670414400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable "include /etc/ssh/sshd_config.d/*.config" again</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-10" date="1670932800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-11" date="1670932801">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-12" date="1670932802">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-13" date="1670932803">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add strict scp check for CVE-2020-15778</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
</package>
<package pkgid="00a64662db2eba16f1d9a702370ed75ea4b9237cbf89e8ac696d60b883998610" name="openssh-keycat" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="23.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
</package>
<package pkgid="bdc07ab8b3827e9556c5ff257441254993b9ccfac842ebd8e22c3605b07bbb3c" name="openssh-keycat" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="25.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-24" date="1692100800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:In channel_request_remote_forwarding the parameters</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-25" date="1703332800">- Type:CVE
- CVE:CVE-2023-48795,CVE-2023-51385
- SUG:NA
- DESC:fix CVE-2023-48795 and CVE-2023-51385</changelog>
</package>
<package pkgid="47358de72d7e338de06bbe7a0c80113f70deb3f75421a5c195b29a54615531b2" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="18.oe2203sp1"/>
  <changelog author="duyiwei&lt;duyiwei@kylinos.cn&gt; - 8.8P1-9" date="1670414400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable "include /etc/ssh/sshd_config.d/*.config" again</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-10" date="1670932800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-11" date="1670932801">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-12" date="1670932802">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-13" date="1670932803">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add strict scp check for CVE-2020-15778</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
</package>
<package pkgid="0172f62a08a7e25bf192ebb609291887c6e8d3491e4bd1c65ff55f054dfd2fa3" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="23.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
</package>
<package pkgid="74c0536f701de0bac95e394dd2c94b83f357fc7a8ff9d0b5500fd12502b85750" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.8p1" rel="25.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-24" date="1692100800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:In channel_request_remote_forwarding the parameters</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-25" date="1703332800">- Type:CVE
- CVE:CVE-2023-48795,CVE-2023-51385
- SUG:NA
- DESC:fix CVE-2023-48795 and CVE-2023-51385</changelog>
</package>
<package pkgid="f8a32ffde257fec558cbf545fccbed465f065be7eb4f67e915b68090fc1bbbc1" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="16.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-7" date="1658836800">- fix expiring-certificates test case</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1.1.1m-8" date="1661169600">- fix proformance degradation on aarch64</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-9" date="1663070400">- add provides for openssl-SMx</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-10" date="1666008000">- add sm2 cert and TLCP feature from master</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
</package>
<package pkgid="d4007e2c057661103c3a1823d0ee6fa2a18a5e3ba0a0bc7e476c7e967ec7fd1d" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="20.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
</package>
<package pkgid="077849a76ab1756adf7c1f37624919c496c06fa56808a5eb38a39e8233e98b0f" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="22.oe2203sp1"/>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
</package>
<package pkgid="c53dd59c15fb09830c87214eb452dfb58e13db8a12e6c99212dda135b2e7182d" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="24.oe2203sp1"/>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
</package>
<package pkgid="166943d1501e23ffa3074884b14c927e70cc660b86dabf64bffc35d2f9ae6323" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="25.oe2203sp1"/>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
</package>
<package pkgid="718ac4a8b13a32592b6d5dec02ddcee6423085ec5540ec14150192caaab4ecbe" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="29.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
</package>
<package pkgid="3f676858afdb17726c32fe5add48eaa99c88af3fcf7b1330c86174632d13f13e" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="32.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
</package>
<package pkgid="9d690f20a2dcf73c9c00206831cf6e2d872260e644966c75de022fec6b29d9cf" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="34.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="567b9352396c6413637208530bd0f5df2a52a3deb55389b6ea8a8f71b7fe8d9d" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="36.oe2203sp1"/>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-36" date="1717416000">- fix CVE-2024-4741</changelog>
</package>
<package pkgid="2ed07c61c878634fb758ced5d6236e714a3cc5982d0c8ae3bf59834c61f0f386" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="16.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-7" date="1658836800">- fix expiring-certificates test case</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1.1.1m-8" date="1661169600">- fix proformance degradation on aarch64</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-9" date="1663070400">- add provides for openssl-SMx</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-10" date="1666008000">- add sm2 cert and TLCP feature from master</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
</package>
<package pkgid="e3b167bcaf65947768568df84820f0ae370d912a9b2ac0e68e06d0a00d07451d" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="20.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
</package>
<package pkgid="9dafb6eb7a2d1740152ef5813038ebf468b7a0ce1fe7dc07ae8efe0f5b04d668" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="22.oe2203sp1"/>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
</package>
<package pkgid="7b9e20ea450b4d8ef3604d030140f3700c3d4538b068c9f35e11f7ea48eac9e8" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="24.oe2203sp1"/>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
</package>
<package pkgid="993e18f502bc661b997252904ebcd7db66e9937be8d92048b06a48e111364533" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="25.oe2203sp1"/>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
</package>
<package pkgid="2d9fc6579ae72473209f1a9bc41ec59acc019aa367f43c134cce876564c95a90" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="29.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
</package>
<package pkgid="95e87d8943cc1bf3374ae4caec2adb04aac0ab88b5d60ff344f5caf1237724e9" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="32.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
</package>
<package pkgid="7f09a67c919f621b51d956d95b7e80f19dca5a0fad4d9d11a31abe7a9630e8ef" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="34.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="a10f0b64c6e91884b6d3cb38dbf7c38e6d864356c193f799a77c6fbbb5fb70d3" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="36.oe2203sp1"/>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-36" date="1717416000">- fix CVE-2024-4741</changelog>
</package>
<package pkgid="7f124e0af0a957edfc0b83f656d8389d2e4ae63952db94bdd067b915f6e2a823" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="16.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-7" date="1658836800">- fix expiring-certificates test case</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1.1.1m-8" date="1661169600">- fix proformance degradation on aarch64</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-9" date="1663070400">- add provides for openssl-SMx</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-10" date="1666008000">- add sm2 cert and TLCP feature from master</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
</package>
<package pkgid="6a54e318da5bad892893b9ad3fcfef06de0a9dbddf8e3329bc977964f6f1c092" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="20.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
</package>
<package pkgid="c900046ec6454b835ea543d6886fbb7e24a76f86f44b63f397dbd0447e5911d6" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="22.oe2203sp1"/>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
</package>
<package pkgid="3ca7f6d800ceaea6241fc7f8781d3b092086786ec2ef83c6963c40a667430c53" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="24.oe2203sp1"/>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
</package>
<package pkgid="a2968c6cc62b7f03c818025b2877bc77d3a01f8aa553ac56a3fb2ade1cf85059" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="25.oe2203sp1"/>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
</package>
<package pkgid="8695189f6f547a4cfc8e128587ed1886b38967546a9cbae9d2f786f545c247f9" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="29.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
</package>
<package pkgid="ea5cba1c96ad8b1359af62d8b79f9be0dbe2603e28652521ab6cd307c0b5c7d9" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="32.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
</package>
<package pkgid="49d2d0c0ad845d3952c7ea441ab33fe6529be643c0d6540cdc0984703ec6ecf7" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="34.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="7bc946b74b3fa27ae9d5727cb50657829ed6a1ca2ef5668d324ad253d0e61244" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="36.oe2203sp1"/>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-36" date="1717416000">- fix CVE-2024-4741</changelog>
</package>
<package pkgid="9aa805602950a72c5bd3733d8aded1d4d206f7a13820498bb68e66bc1c9db0ed" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="16.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-7" date="1658836800">- fix expiring-certificates test case</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1.1.1m-8" date="1661169600">- fix proformance degradation on aarch64</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-9" date="1663070400">- add provides for openssl-SMx</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-10" date="1666008000">- add sm2 cert and TLCP feature from master</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
</package>
<package pkgid="987626c2549ca64d6be1db970b5bbd47ca83b80c511266a53e714429703a458a" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="20.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
</package>
<package pkgid="4d95146e06c08c0a4304e7a943464be9e552f490abdfd089f949f6dd9367d9a6" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="22.oe2203sp1"/>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
</package>
<package pkgid="f452a7184ff3aab75707b59deca81d002bc18b76985501768252433326c8c0d1" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="24.oe2203sp1"/>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
</package>
<package pkgid="0435e504fce44c4b7c72e08f105a6bc3787cbc6baf79b10e1ac5bdb90f2ec817" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="25.oe2203sp1"/>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
</package>
<package pkgid="128bfedda439b6eeebe1331d36c551e34ad54b37a15907ad15ddc35ac44306d0" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="29.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
</package>
<package pkgid="81dd4baa5dcba31d8c9b39efe835228b6b71b0c66da1153bd62bfba9fd785a2b" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="32.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
</package>
<package pkgid="57d5073387563c0af2bc7844554d96783a2ad73f197b950e7a9a5c4040fb37b8" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="34.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="94610944a868e21fd252489f4dfe613771f881f3b4deae94896843961c7a0f17" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="36.oe2203sp1"/>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-36" date="1717416000">- fix CVE-2024-4741</changelog>
</package>
<package pkgid="97203674fa97ed32bfbbb7780f861e18ab22f8ae5e50970ec512d93d5e673334" name="openssl-help" arch="noarch">
  <version epoch="1" ver="1.1.1m" rel="16.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-7" date="1658836800">- fix expiring-certificates test case</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1.1.1m-8" date="1661169600">- fix proformance degradation on aarch64</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-9" date="1663070400">- add provides for openssl-SMx</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-10" date="1666008000">- add sm2 cert and TLCP feature from master</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
</package>
<package pkgid="6933e3f579a1aa2e0010240ff9144900484a5fc94f301ebced73c087499de563" name="openssl-help" arch="noarch">
  <version epoch="1" ver="1.1.1m" rel="20.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
</package>
<package pkgid="f68e506fddc60b2e4af3284e8009da39b4e9196ae38118ff631a8c7fda652535" name="openssl-help" arch="noarch">
  <version epoch="1" ver="1.1.1m" rel="22.oe2203sp1"/>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
</package>
<package pkgid="3b092f7ba8d924034316a5788125fed57ba82ff85523ca4412ac1372d331fa05" name="openssl-help" arch="noarch">
  <version epoch="1" ver="1.1.1m" rel="24.oe2203sp1"/>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
</package>
<package pkgid="f7049f783167c3bee51f2bef65d3a5163e03b1c6769920335f573f0ff0982c2d" name="openssl-help" arch="noarch">
  <version epoch="1" ver="1.1.1m" rel="25.oe2203sp1"/>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
</package>
<package pkgid="a9e301f11b2374b4388a70f4a2019bd029bb4b642a085ffcfab89152b006d805" name="openssl-help" arch="noarch">
  <version epoch="1" ver="1.1.1m" rel="29.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
</package>
<package pkgid="43c6a128e04bc51506fb78f07665ff1a34a213a0c04367a233fe7e7330d2467c" name="openssl-help" arch="noarch">
  <version epoch="1" ver="1.1.1m" rel="32.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
</package>
<package pkgid="82aafa5e325ebed9af27e2cf0c56226ff08644ab0a1fe73a36b01e955872d273" name="openssl-help" arch="noarch">
  <version epoch="1" ver="1.1.1m" rel="34.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="bb5ccd40e2b99743edd82999c2fc750d08feb9b40ef5327afad950af11484979" name="openssl-help" arch="noarch">
  <version epoch="1" ver="1.1.1m" rel="36.oe2203sp1"/>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-36" date="1717416000">- fix CVE-2024-4741</changelog>
</package>
<package pkgid="079689608e62accd53f5233e9a22fe394ee7c2dc642bfa09fe2c8912286f0f8b" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="16.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-7" date="1658836800">- fix expiring-certificates test case</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1.1.1m-8" date="1661169600">- fix proformance degradation on aarch64</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-9" date="1663070400">- add provides for openssl-SMx</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-10" date="1666008000">- add sm2 cert and TLCP feature from master</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
</package>
<package pkgid="1481f2dd9ae23b777185a6511d24fb8e20c7d13bb14618e2d114e9f2b4f4b21d" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="20.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
</package>
<package pkgid="93c9f7c685c5df6b6b00bc75c52858574ed7e80e8c6e375ff11d12ce260c772e" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="22.oe2203sp1"/>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
</package>
<package pkgid="70a49c7b461cf4fc3b1d1a18aea9ae466431d16ceff359f1e365c73fc97c717e" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="24.oe2203sp1"/>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
</package>
<package pkgid="5360d9bf43cb995e9e1dace966a9342f7d70af5718e9448cd8a81ad494b5e8e0" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="25.oe2203sp1"/>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
</package>
<package pkgid="8bb83622fc149ffa971269754c65d7492c5d5e9bed608b629e61f68455d19508" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="29.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
</package>
<package pkgid="93e01b3a36b0c164401ac0e02d64a202459bdd73b9d2675e5054a3067240185b" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="32.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
</package>
<package pkgid="8db5e191718cfafef85bd612dbc0fcb3ee157f7f614121affa0826423581d29c" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="34.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="800fad830beded3077d72dea34aa3135ff1330319f5789dcb76a98f4a6f4ddbb" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="36.oe2203sp1"/>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-36" date="1717416000">- fix CVE-2024-4741</changelog>
</package>
<package pkgid="4d747df8c226f3941cd640c37c43c9b32243f54efc4fd6571711fe0c6d01643c" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="16.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-7" date="1658836800">- fix expiring-certificates test case</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1.1.1m-8" date="1661169600">- fix proformance degradation on aarch64</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-9" date="1663070400">- add provides for openssl-SMx</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-10" date="1666008000">- add sm2 cert and TLCP feature from master</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
</package>
<package pkgid="494fad510843b4e8027972f1f1b477e50041ddcac13173a14029376711eff7f3" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="20.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
</package>
<package pkgid="a16372069047a373efb53bf1fdf3aca9060e3ff2a5356285d140775c26764921" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="22.oe2203sp1"/>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
</package>
<package pkgid="bed74d5640a369c005b31eeb10cb4592d55cd7ff1b10db021435067284c22f42" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="24.oe2203sp1"/>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
</package>
<package pkgid="602b861ebca8dbca3d92d2c185ac154ca04737d5d8727f1f4afc15ec8a8d473b" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="25.oe2203sp1"/>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
</package>
<package pkgid="5d5d00185322e6278763326e1f04c8ec4e2309a8117d8e03964a662d3a3aed8b" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="29.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
</package>
<package pkgid="f87632e9bb8080844020f02945fc30845ddb7ddfdec6e8913ae380de65abd5d0" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="32.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
</package>
<package pkgid="58b419b721e690c967f5a7e4ecfb1721d7cc3cb75702b0c68a6513f5555d4243" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="34.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="02368a26569a7d5a13f5f4edef6050c1a0d3b9413ce290348c45c85e31b3d062" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.1.1m" rel="36.oe2203sp1"/>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-36" date="1717416000">- fix CVE-2024-4741</changelog>
</package>
<package pkgid="e3547fef7e5d80610f3397f121809bc9cc0d0641cb39942c242ca8d2f3a604eb" name="openvswitch" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="2.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 2.12.0-15" date="1617105600">- fix CVE-2020-27827 and CVE-2015-8011</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.12.0-16" date="1627560000">- Type:cve
- ID:CVE-2021-36980 
- SUG:NA
- DESC: fix CVE-2021-36980</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.12.0-17" date="1627992000">- Adds python3-ovs as provide</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-18" date="1630497600">- Change the OVS startup mode to service startup.</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-19" date="1630584000">- Fix selinux preventing ovs-kmod-ctl err</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
</package>
<package pkgid="15d4e749bb2bdba7033b751a3df01240e2cf670432f1d884cc8d9f4460066d35" name="openvswitch" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.12.0-16" date="1627560000">- Type:cve
- ID:CVE-2021-36980 
- SUG:NA
- DESC: fix CVE-2021-36980</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.12.0-17" date="1627992000">- Adds python3-ovs as provide</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-18" date="1630497600">- Change the OVS startup mode to service startup.</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-19" date="1630584000">- Fix selinux preventing ovs-kmod-ctl err</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
</package>
<package pkgid="3fb947b06601d029aeaf120055e8670fe3966e1e0ed8ce4c79196eec8a1f9894" name="openvswitch" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="5.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
</package>
<package pkgid="3309700758130988bb7670cfd4e3f20eab9c498ec3462616224158839e259853" name="openvswitch" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="7.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-6" date="1702555200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix file conflicts</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-7" date="1708430400">- fix CVE-2023-3966</changelog>
</package>
<package pkgid="8724b54b1c885f3e884069f26452b7c226cb73f8e631963fc0605f8cc9c312fc" name="openvswitch" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="8.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-6" date="1702555200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix file conflicts</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-7" date="1708430400">- fix CVE-2023-3966</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.12.4-8" date="1711713600">- Type:CVE
- Id:CVE-2022-2639
- SUG:NA
- DESC:fix CVE-2022-2639</changelog>
</package>
<package pkgid="f8f0d29c12dbf5e543cc05dd5947baeb30c669160f02709e63c6a8b6f1b022c1" name="openvswitch-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="2.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 2.12.0-15" date="1617105600">- fix CVE-2020-27827 and CVE-2015-8011</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.12.0-16" date="1627560000">- Type:cve
- ID:CVE-2021-36980 
- SUG:NA
- DESC: fix CVE-2021-36980</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.12.0-17" date="1627992000">- Adds python3-ovs as provide</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-18" date="1630497600">- Change the OVS startup mode to service startup.</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-19" date="1630584000">- Fix selinux preventing ovs-kmod-ctl err</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
</package>
<package pkgid="24caf206ec0d64df74db30b72a9a0485724f2b124c60a16ee251a324467eef0c" name="openvswitch-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.12.0-16" date="1627560000">- Type:cve
- ID:CVE-2021-36980 
- SUG:NA
- DESC: fix CVE-2021-36980</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.12.0-17" date="1627992000">- Adds python3-ovs as provide</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-18" date="1630497600">- Change the OVS startup mode to service startup.</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-19" date="1630584000">- Fix selinux preventing ovs-kmod-ctl err</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
</package>
<package pkgid="0ec5d7e1bf04f81acc88457078db80a50014f7e6cdd41f6b3c25cc9a67c34a67" name="openvswitch-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="5.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
</package>
<package pkgid="1b3b725d31eb8c62544210b91e649c6ef0143b3ecc1383aeca649ff79e9e1e1d" name="openvswitch-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="7.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-6" date="1702555200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix file conflicts</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-7" date="1708430400">- fix CVE-2023-3966</changelog>
</package>
<package pkgid="f4c883fc38f412b556bfc04c969841a06d722f139bca68e29d93e95a89d7df68" name="openvswitch-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="8.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-6" date="1702555200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix file conflicts</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-7" date="1708430400">- fix CVE-2023-3966</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.12.4-8" date="1711713600">- Type:CVE
- Id:CVE-2022-2639
- SUG:NA
- DESC:fix CVE-2022-2639</changelog>
</package>
<package pkgid="594a534c35facb5991c181d6ca7a8fc879c2adc240f48954a973bf7e49a146ca" name="openvswitch-debugsource" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="2.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 2.12.0-15" date="1617105600">- fix CVE-2020-27827 and CVE-2015-8011</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.12.0-16" date="1627560000">- Type:cve
- ID:CVE-2021-36980 
- SUG:NA
- DESC: fix CVE-2021-36980</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.12.0-17" date="1627992000">- Adds python3-ovs as provide</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-18" date="1630497600">- Change the OVS startup mode to service startup.</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-19" date="1630584000">- Fix selinux preventing ovs-kmod-ctl err</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
</package>
<package pkgid="4b291071dd5f420161b5a1dd69a612c319e1b2c8dced531dd3ab6797c9e6a24f" name="openvswitch-debugsource" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.12.0-16" date="1627560000">- Type:cve
- ID:CVE-2021-36980 
- SUG:NA
- DESC: fix CVE-2021-36980</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.12.0-17" date="1627992000">- Adds python3-ovs as provide</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-18" date="1630497600">- Change the OVS startup mode to service startup.</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-19" date="1630584000">- Fix selinux preventing ovs-kmod-ctl err</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
</package>
<package pkgid="b94f252fd0cfa2e2043d720b6786811bb89f5a8b9216875ab5b5c78406139bcb" name="openvswitch-debugsource" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="5.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
</package>
<package pkgid="4201030166c4ebb71170b467075b92e5d440a972153413092e3889bc21d16916" name="openvswitch-debugsource" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="7.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-6" date="1702555200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix file conflicts</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-7" date="1708430400">- fix CVE-2023-3966</changelog>
</package>
<package pkgid="1a67c5d8cb6c936377a9b31a07400721323d0edfdf634719979f741133641726" name="openvswitch-debugsource" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="8.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-6" date="1702555200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix file conflicts</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-7" date="1708430400">- fix CVE-2023-3966</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.12.4-8" date="1711713600">- Type:CVE
- Id:CVE-2022-2639
- SUG:NA
- DESC:fix CVE-2022-2639</changelog>
</package>
<package pkgid="1fc5155b46382ccc566a4cd92f6329633291c0532fa79fb2fc0e15313aed952b" name="openvswitch-devel" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="2.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 2.12.0-15" date="1617105600">- fix CVE-2020-27827 and CVE-2015-8011</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.12.0-16" date="1627560000">- Type:cve
- ID:CVE-2021-36980 
- SUG:NA
- DESC: fix CVE-2021-36980</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.12.0-17" date="1627992000">- Adds python3-ovs as provide</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-18" date="1630497600">- Change the OVS startup mode to service startup.</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-19" date="1630584000">- Fix selinux preventing ovs-kmod-ctl err</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
</package>
<package pkgid="fb6768ce5839079c9d62cf37f528fb281a6c130af1781d4bdb8e510ec7180994" name="openvswitch-devel" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.12.0-16" date="1627560000">- Type:cve
- ID:CVE-2021-36980 
- SUG:NA
- DESC: fix CVE-2021-36980</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.12.0-17" date="1627992000">- Adds python3-ovs as provide</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-18" date="1630497600">- Change the OVS startup mode to service startup.</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-19" date="1630584000">- Fix selinux preventing ovs-kmod-ctl err</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
</package>
<package pkgid="22caccc9a5b9e4a78dd72ab2b3de7ad33d31fa9fea8eab32d2e28b806454a941" name="openvswitch-devel" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="5.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
</package>
<package pkgid="b9e03efad550b1dcd06c19629dc0025d1194858dfdc1b39e40ab2aa236d28ab4" name="openvswitch-devel" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="7.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-6" date="1702555200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix file conflicts</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-7" date="1708430400">- fix CVE-2023-3966</changelog>
</package>
<package pkgid="0655c04924bab8df100805b2d9364e96801216391a20b9d9ac21080a875586bf" name="openvswitch-devel" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="8.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-6" date="1702555200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix file conflicts</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-7" date="1708430400">- fix CVE-2023-3966</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.12.4-8" date="1711713600">- Type:CVE
- Id:CVE-2022-2639
- SUG:NA
- DESC:fix CVE-2022-2639</changelog>
</package>
<package pkgid="a78d3d488352f5d2a994fcfa986d7ddc05ee206bfc82f9748f2f0d914f8f92e7" name="openvswitch-help" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="2.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 2.12.0-15" date="1617105600">- fix CVE-2020-27827 and CVE-2015-8011</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.12.0-16" date="1627560000">- Type:cve
- ID:CVE-2021-36980 
- SUG:NA
- DESC: fix CVE-2021-36980</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.12.0-17" date="1627992000">- Adds python3-ovs as provide</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-18" date="1630497600">- Change the OVS startup mode to service startup.</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-19" date="1630584000">- Fix selinux preventing ovs-kmod-ctl err</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
</package>
<package pkgid="4d4f2adf087ddfce4196b6bbe4258d72e5944b42b064eaf9c9c6d0dc81ac4d38" name="openvswitch-help" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.12.0-16" date="1627560000">- Type:cve
- ID:CVE-2021-36980 
- SUG:NA
- DESC: fix CVE-2021-36980</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.12.0-17" date="1627992000">- Adds python3-ovs as provide</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-18" date="1630497600">- Change the OVS startup mode to service startup.</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-19" date="1630584000">- Fix selinux preventing ovs-kmod-ctl err</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
</package>
<package pkgid="48ffa06ae1f974080ad9a6c91a8d7a079c6936c4248bbc9b8e70f46ac516410c" name="openvswitch-help" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="5.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
</package>
<package pkgid="7b81e3c5dd44727cab2de36583bcb86fca648a9a4a071ed35ac3db3e64d527d4" name="openvswitch-help" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="7.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-6" date="1702555200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix file conflicts</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-7" date="1708430400">- fix CVE-2023-3966</changelog>
</package>
<package pkgid="0db71c4d87428a5a54208fc16d691fdf5b8a8c59dcf833f409ebc6d320aca095" name="openvswitch-help" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="8.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-6" date="1702555200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix file conflicts</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-7" date="1708430400">- fix CVE-2023-3966</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.12.4-8" date="1711713600">- Type:CVE
- Id:CVE-2022-2639
- SUG:NA
- DESC:fix CVE-2022-2639</changelog>
</package>
<package pkgid="c6f53764fbc5a14c908b410da4eb03823dcb0d04abdded45eb8f3e7a85d1309e" name="optipng" arch="x86_64">
  <version epoch="0" ver="0.7.8" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.7.8-1" date="1700827200">- Upgrade to 0.7.8 for fix CVE-2023-43907</changelog>
</package>
<package pkgid="aebc0862634c67652a573cd35a4768ffc73fc601bf5cd86ffcf7b4377609fd4e" name="optipng-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.8" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.7.8-1" date="1700827200">- Upgrade to 0.7.8 for fix CVE-2023-43907</changelog>
</package>
<package pkgid="a97c49a0193735a0510358a6c646c57d5cd51cac49a903b63e39f821a859b54a" name="optipng-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7.8" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.7.8-1" date="1700827200">- Upgrade to 0.7.8 for fix CVE-2023-43907</changelog>
</package>
<package pkgid="720f060869111467af99bdbb83258c6194254621a2e63295e9fd9ca1fa9818f9" name="opusfile" arch="x86_64">
  <version epoch="0" ver="0.11" rel="5.oe2203sp1"/>
  <changelog author="zhaoyao&lt;zhaoyao32@huawei.com&gt; - 0.11-4" date="1622635200">- fixs faileds: /bin/sh: gcc: command not found.</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.11-5" date="1674993600">- Fix CVE-2022-47021</changelog>
</package>
<package pkgid="8e41869af6856af0554c2176b81942cdeb734824f3a7dd038124ed5400407887" name="opusfile-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.11" rel="5.oe2203sp1"/>
  <changelog author="zhaoyao&lt;zhaoyao32@huawei.com&gt; - 0.11-4" date="1622635200">- fixs faileds: /bin/sh: gcc: command not found.</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.11-5" date="1674993600">- Fix CVE-2022-47021</changelog>
</package>
<package pkgid="6f3f5dfcccb358bce3e206daa8a78ddb963d248c06b89deb41f2670113c48a18" name="opusfile-debugsource" arch="x86_64">
  <version epoch="0" ver="0.11" rel="5.oe2203sp1"/>
  <changelog author="zhaoyao&lt;zhaoyao32@huawei.com&gt; - 0.11-4" date="1622635200">- fixs faileds: /bin/sh: gcc: command not found.</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.11-5" date="1674993600">- Fix CVE-2022-47021</changelog>
</package>
<package pkgid="e27557f13adc41c3b9db1586cb880a45e92372e21f5fafa023b572ea949a48ab" name="opusfile-devel" arch="x86_64">
  <version epoch="0" ver="0.11" rel="5.oe2203sp1"/>
  <changelog author="zhaoyao&lt;zhaoyao32@huawei.com&gt; - 0.11-4" date="1622635200">- fixs faileds: /bin/sh: gcc: command not found.</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.11-5" date="1674993600">- Fix CVE-2022-47021</changelog>
</package>
<package pkgid="dd69e9e2804229d47dec387581fef597b355950a9962e1c7eef1b4b1563701b2" name="os-maven-plugin" arch="noarch">
  <version epoch="0" ver="1.2.3" rel="3.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.2.3-2" date="1709812800">- fix the architecture cannot be identified causes failure</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.2.3-3" date="1710417600">- add loongarch64 and RISC-V support</changelog>
</package>
<package pkgid="6b416427a37d97ef2acb98033ed58d4993e64022ffb2867f46880fd808110a8e" name="os-maven-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.3" rel="3.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.2.3-2" date="1709812800">- fix the architecture cannot be identified causes failure</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.2.3-3" date="1710417600">- add loongarch64 and RISC-V support</changelog>
</package>
<package pkgid="04179ca172affb2abbddd0b4ed35bea67a65cdc6cfb77a67246163281520bb95" name="oscilloscope" arch="noarch">
  <version epoch="0" ver="0.14.1" rel="3.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 0.14.1-2" date="1669032000">- Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.14.1-3" date="1706788800">- Modify tuna config.py use gtk3</changelog>
</package>
<package pkgid="fd217f7cdd8fd4fab55c9d1f44151a06b5863dd31c43490c778523d69dcd25c8" name="oscilloscope" arch="noarch">
  <version epoch="0" ver="0.19" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 0.14.1-2" date="1669032000">- Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.14.1-3" date="1706788800">- Modify tuna config.py use gtk3</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.19-1" date="1708689600">- Upgrade to 0.19 for fix tuna gui execution error</changelog>
</package>
<package pkgid="671718a8125a7fa6614a0617a4ff50a77e01d8490f1a89ad088455d987e73943" name="pam" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="6.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 1.5.1-2" date="1625832000">- use gdbm</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 1.5.1-3" date="1626350400">- remove unnecessary dependency packages from the spec file</changelog>
  <changelog author="chenyaqiang &lt;chenyaqiang@huawei.com&gt; - 1.5.1-4" date="1631707200">- bugfix with cannot open database file</changelog>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 1.5.2-1" date="1640606400">- update version to 1.5.2</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1.5.2-2" date="1642161600">- add sm3 crypt support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-3" date="1669377600">- modify the patch name for the problem of vendor hard code</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-4" date="1670846400">- Change Chinese translation</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.5.2-6" date="1678363200">- revert: bugfix with cannot open database file</changelog>
</package>
<package pkgid="9d26e34270615d2a1dcad325da874c0b7374ef9ce56b0a7e86b3a383e596c3ed" name="pam" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="7.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-3" date="1669377600">- modify the patch name for the problem of vendor hard code</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-4" date="1670846400">- Change Chinese translation</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.5.2-6" date="1678363200">- revert: bugfix with cannot open database file</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.5.2-7" date="1706097600">- fix CVE-2024-22365</changelog>
</package>
<package pkgid="4fb9a4ecd11ab203efc5b7eb8ee84212d4e3ab092de62474a99b595846b120da" name="pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="6.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 1.5.1-2" date="1625832000">- use gdbm</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 1.5.1-3" date="1626350400">- remove unnecessary dependency packages from the spec file</changelog>
  <changelog author="chenyaqiang &lt;chenyaqiang@huawei.com&gt; - 1.5.1-4" date="1631707200">- bugfix with cannot open database file</changelog>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 1.5.2-1" date="1640606400">- update version to 1.5.2</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1.5.2-2" date="1642161600">- add sm3 crypt support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-3" date="1669377600">- modify the patch name for the problem of vendor hard code</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-4" date="1670846400">- Change Chinese translation</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.5.2-6" date="1678363200">- revert: bugfix with cannot open database file</changelog>
</package>
<package pkgid="d628a709264e1017e0f484982d4e4c4897ebae6aa17fe243abbb2b7c316f5862" name="pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="7.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-3" date="1669377600">- modify the patch name for the problem of vendor hard code</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-4" date="1670846400">- Change Chinese translation</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.5.2-6" date="1678363200">- revert: bugfix with cannot open database file</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.5.2-7" date="1706097600">- fix CVE-2024-22365</changelog>
</package>
<package pkgid="6de455672b0d8e8ea02e2671798681c58ff06ada12b751731309429b5f8de32d" name="pam-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="6.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 1.5.1-2" date="1625832000">- use gdbm</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 1.5.1-3" date="1626350400">- remove unnecessary dependency packages from the spec file</changelog>
  <changelog author="chenyaqiang &lt;chenyaqiang@huawei.com&gt; - 1.5.1-4" date="1631707200">- bugfix with cannot open database file</changelog>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 1.5.2-1" date="1640606400">- update version to 1.5.2</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1.5.2-2" date="1642161600">- add sm3 crypt support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-3" date="1669377600">- modify the patch name for the problem of vendor hard code</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-4" date="1670846400">- Change Chinese translation</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.5.2-6" date="1678363200">- revert: bugfix with cannot open database file</changelog>
</package>
<package pkgid="1d02d6267cff956c5d30c395496bb3cd8d3fba7d5c863ac227d07b2afc18cbe1" name="pam-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="7.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-3" date="1669377600">- modify the patch name for the problem of vendor hard code</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-4" date="1670846400">- Change Chinese translation</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.5.2-6" date="1678363200">- revert: bugfix with cannot open database file</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.5.2-7" date="1706097600">- fix CVE-2024-22365</changelog>
</package>
<package pkgid="ebea0801981a6fab17aae083f0563ab89c92f9c6f977a23ca93cb1040352e6ad" name="pam-devel" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="6.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 1.5.1-2" date="1625832000">- use gdbm</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 1.5.1-3" date="1626350400">- remove unnecessary dependency packages from the spec file</changelog>
  <changelog author="chenyaqiang &lt;chenyaqiang@huawei.com&gt; - 1.5.1-4" date="1631707200">- bugfix with cannot open database file</changelog>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 1.5.2-1" date="1640606400">- update version to 1.5.2</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1.5.2-2" date="1642161600">- add sm3 crypt support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-3" date="1669377600">- modify the patch name for the problem of vendor hard code</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-4" date="1670846400">- Change Chinese translation</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.5.2-6" date="1678363200">- revert: bugfix with cannot open database file</changelog>
</package>
<package pkgid="cac5368ff6fbc29b0eb1a09663b126fd493032b5ee9f648c6b548f6c58b178e1" name="pam-devel" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="7.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-3" date="1669377600">- modify the patch name for the problem of vendor hard code</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-4" date="1670846400">- Change Chinese translation</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.5.2-6" date="1678363200">- revert: bugfix with cannot open database file</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.5.2-7" date="1706097600">- fix CVE-2024-22365</changelog>
</package>
<package pkgid="568fcae49a49f67351d9d68a870fe348764335874716e592d805b7acc2a8b4c5" name="pam-help" arch="noarch">
  <version epoch="0" ver="1.5.2" rel="6.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 1.5.1-2" date="1625832000">- use gdbm</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 1.5.1-3" date="1626350400">- remove unnecessary dependency packages from the spec file</changelog>
  <changelog author="chenyaqiang &lt;chenyaqiang@huawei.com&gt; - 1.5.1-4" date="1631707200">- bugfix with cannot open database file</changelog>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 1.5.2-1" date="1640606400">- update version to 1.5.2</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1.5.2-2" date="1642161600">- add sm3 crypt support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-3" date="1669377600">- modify the patch name for the problem of vendor hard code</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-4" date="1670846400">- Change Chinese translation</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.5.2-6" date="1678363200">- revert: bugfix with cannot open database file</changelog>
</package>
<package pkgid="dd103f842c9ba5ea2f535ee37654d0792d8f36b5ff993f85890642adcfeafa09" name="pam-help" arch="noarch">
  <version epoch="0" ver="1.5.2" rel="7.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-3" date="1669377600">- modify the patch name for the problem of vendor hard code</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-4" date="1670846400">- Change Chinese translation</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.5.2-6" date="1678363200">- revert: bugfix with cannot open database file</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.5.2-7" date="1706097600">- fix CVE-2024-22365</changelog>
</package>
<package pkgid="aef2588deac5f39ada0125f97e0e8fedfc9ab9fb0bd23e97f4d69b7430292a84" name="pam_ssh_agent_auth" arch="x86_64">
  <version epoch="0" ver="0.10.4" rel="4.18.oe2203sp1"/>
  <changelog author="duyiwei&lt;duyiwei@kylinos.cn&gt; - 8.8P1-9" date="1670414400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable "include /etc/ssh/sshd_config.d/*.config" again</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-10" date="1670932800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-11" date="1670932801">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-12" date="1670932802">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-13" date="1670932803">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add strict scp check for CVE-2020-15778</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
</package>
<package pkgid="f35390efa2c2773558f672317686db7b07a558bfb50cc09f8a88e4ade059d2f1" name="pam_ssh_agent_auth" arch="x86_64">
  <version epoch="0" ver="0.10.4" rel="4.23.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
</package>
<package pkgid="a4402f73d0b603ac95ef68121b9758b891ce4e2fa69dc4677853cddedb231429" name="pam_ssh_agent_auth" arch="x86_64">
  <version epoch="0" ver="0.10.4" rel="4.25.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-24" date="1692100800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:In channel_request_remote_forwarding the parameters</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-25" date="1703332800">- Type:CVE
- CVE:CVE-2023-48795,CVE-2023-51385
- SUG:NA
- DESC:fix CVE-2023-48795 and CVE-2023-51385</changelog>
</package>
<package pkgid="504105398355bba7639db0435ba5bcc481ab87cedad669d441a4bb1bcd7bea64" name="papi" arch="x86_64">
  <version epoch="0" ver="5.7.0" rel="1.oe2203sp1"/>
  <changelog author="wujie &lt;wujie@nj.iscas.ac.cn&gt; - 5.6.0-10" date="1643025600">- add support for riscv64 from http://fedora.riscv.rocks/koji/buildinfo?buildID=31200
  Author is David Abdurachmanov &lt;david.abdurachmanov@gmail.com&gt;</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 5.7.0-1" date="1676289600">- Update to 5.7.0</changelog>
</package>
<package pkgid="52ce464ec35852a21a2b772f08d5070eb67917c8f62bc23c1c5638e646aa7e39" name="papi-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.7.0" rel="1.oe2203sp1"/>
  <changelog author="wujie &lt;wujie@nj.iscas.ac.cn&gt; - 5.6.0-10" date="1643025600">- add support for riscv64 from http://fedora.riscv.rocks/koji/buildinfo?buildID=31200
  Author is David Abdurachmanov &lt;david.abdurachmanov@gmail.com&gt;</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 5.7.0-1" date="1676289600">- Update to 5.7.0</changelog>
</package>
<package pkgid="1f90b03040fc874155a3c95d7bb6454cd67be6cadad0ef03a422ab4d3297e8f4" name="papi-debugsource" arch="x86_64">
  <version epoch="0" ver="5.7.0" rel="1.oe2203sp1"/>
  <changelog author="wujie &lt;wujie@nj.iscas.ac.cn&gt; - 5.6.0-10" date="1643025600">- add support for riscv64 from http://fedora.riscv.rocks/koji/buildinfo?buildID=31200
  Author is David Abdurachmanov &lt;david.abdurachmanov@gmail.com&gt;</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 5.7.0-1" date="1676289600">- Update to 5.7.0</changelog>
</package>
<package pkgid="fd73d37a4901a20aa177fcf80429ab1b758c884499f0c830c66d0871c2c3187a" name="papi-devel" arch="x86_64">
  <version epoch="0" ver="5.7.0" rel="1.oe2203sp1"/>
  <changelog author="wujie &lt;wujie@nj.iscas.ac.cn&gt; - 5.6.0-10" date="1643025600">- add support for riscv64 from http://fedora.riscv.rocks/koji/buildinfo?buildID=31200
  Author is David Abdurachmanov &lt;david.abdurachmanov@gmail.com&gt;</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 5.7.0-1" date="1676289600">- Update to 5.7.0</changelog>
</package>
<package pkgid="b24f3fa672e63a4a6ccbcfd2622434fddc5e64fea852c11dbd3b01944dfa65cf" name="papi-help" arch="x86_64">
  <version epoch="0" ver="5.7.0" rel="1.oe2203sp1"/>
  <changelog author="wujie &lt;wujie@nj.iscas.ac.cn&gt; - 5.6.0-10" date="1643025600">- add support for riscv64 from http://fedora.riscv.rocks/koji/buildinfo?buildID=31200
  Author is David Abdurachmanov &lt;david.abdurachmanov@gmail.com&gt;</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 5.7.0-1" date="1676289600">- Update to 5.7.0</changelog>
</package>
<package pkgid="ba018fd46b32ec29de2220441a20440330a7d679f2a0b3963eb8b59d7a7d81f3" name="patchelf" arch="x86_64">
  <version epoch="0" ver="0.16.0" rel="1.oe2203sp1"/>
  <changelog author="konglidong &lt;konglidong@uniontech.com&gt; - 0.13-1" date="1637668800">- package init</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 0.16.0-1" date="1672401600">- update to 0.16.0 to fix CVE-2022-44940</changelog>
</package>
<package pkgid="92def81bd2d02e75ec6dfb5232103ce9e9cc63766a1df4b94c462046bea1d23a" name="patchelf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.16.0" rel="1.oe2203sp1"/>
  <changelog author="konglidong &lt;konglidong@uniontech.com&gt; - 0.13-1" date="1637668800">- package init</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 0.16.0-1" date="1672401600">- update to 0.16.0 to fix CVE-2022-44940</changelog>
</package>
<package pkgid="0af6b49c3ffa0171719c4917d681555a968a61c3225f7bfd986c31a45552d28c" name="patchelf-debugsource" arch="x86_64">
  <version epoch="0" ver="0.16.0" rel="1.oe2203sp1"/>
  <changelog author="konglidong &lt;konglidong@uniontech.com&gt; - 0.13-1" date="1637668800">- package init</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 0.16.0-1" date="1672401600">- update to 0.16.0 to fix CVE-2022-44940</changelog>
</package>
<package pkgid="9bdb8a1c5e9bd498ac4c2cc44c28e13d96c67cb756e2de9cc9602571d6f5b90f" name="pcp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="1bc6d959d2354d3aadad9d258582ec2939d83996e3ee05f883e860f59cfb351e" name="pcp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="fb8dd9ade20b9e3f658196d041c32599e90de8a2efefed4f2575d1b531bcab7c" name="pcp-conf" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="6bf0ba87ae9b969dfe81aebf44d45444871cc8f577e76f2511d04b9b2ec4d9f1" name="pcp-conf" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="cc6870cbb9558447ce585359f46a1c830760bf40e6810ae94b9baea850c0c91a" name="pcp-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="be29980478a598507c179c6dc839f4b877dcc8002e2a6758d70a277eccf908a9" name="pcp-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="dd623fdc0608e7f732db3cf924e93b8b33f56cbd78473374e2e1a48c6bc8f20e" name="pcp-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="45b5c6a2717d98e3b3c8ded2a13a7cf055e2bf39593694cedc5b83964a4203c1" name="pcp-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="a9ee64206664cfe88e6d2fcca2bcd831c42ad035d0aaff19a409a1f0666eb7cb" name="pcp-devel" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="50cc60fba177548de6da2270e66403c537f66039646d693e8c0c9a9c9808f310" name="pcp-devel" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="d08ddeffda392baa9e65859d2ad3ab6b40e4540e7be52a19ff9976fc0d170cc7" name="pcp-export-pcp2elasticsearch" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="e0ef3fced553fac6a9dceaf688148af803bc1dd3b30166c7ceacf414609e3a42" name="pcp-export-pcp2elasticsearch" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="79d241ea8ec52516742efd0acde0a281c413fa00df0de6ebaac37b931043a614" name="pcp-export-pcp2graphite" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="7a3426120af6777253d7e078893e94940cd90fe03a4387a2607f36e40d2a96a6" name="pcp-export-pcp2graphite" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="b4f7d56223212066118ba2ae6a04c2cbd77a21c99adf8a34205b88e9c15f6105" name="pcp-export-pcp2influxdb" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="9720546f48cf0dafc5ac89a3e56f8f44a7b406320c59b387020c267abae00ac7" name="pcp-export-pcp2influxdb" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="31d884623ba3d13ce29555b39ecfb38ee234238a760c5f85ed3b3e62b9801983" name="pcp-export-pcp2json" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="ca03073170609f86a32a44c103bdcc230c8866b9a341702f972a6f6a463a9f3a" name="pcp-export-pcp2json" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="4a3cfbf74189a35665cdf3b26a2105fa4de19fe73793dcc24094e5b471f7a2ea" name="pcp-export-pcp2spark" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="d1178bded636cb59549ef8360391064a44484cae4fa26f1e17e58dd078abf88c" name="pcp-export-pcp2spark" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="4311afe14cb10340dfef17a53a740636abcebe4995ac8ad73bc2632f5c971c70" name="pcp-export-pcp2xml" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="45949f757b1fdaeb84173de933c42b004bd4f83511af3e68863c1988fc579c6b" name="pcp-export-pcp2xml" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="c1bc9d6c4cc3db5de98a9ae63088f8d17c637e54a4e867fc4dc5bf6d9a44ac65" name="pcp-export-pcp2zabbix" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="7d1204ee464aa30a9b31d2fa061130d478e77d3e5e500acf10adb56ff9619109" name="pcp-export-pcp2zabbix" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="c58e86168949f976004360baef33645726584c80ad276e8e3251f8aac9024156" name="pcp-export-zabbix-agent" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="8344a3a47054066f63ba76ab2611f4cd165c06fabae38ba342d29dcdb8d26512" name="pcp-export-zabbix-agent" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="ee2f374d06dd166f70caa9bf15fd580b46164d5707169e7b91a456bbe35e2ab9" name="pcp-gui" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="558367b05433ddaa5c27859cb2772c76695217ed521a7f0649407c2360652813" name="pcp-gui" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="b8acfcefc90144dec6bb30d10694131ba44d8befc408845762ea24144ac52b8c" name="pcp-help" arch="noarch">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="e7f6131e5c9ec94e621f951b7c8b0b0801669e5b6fceea1f86605e5c375905c5" name="pcp-help" arch="noarch">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="9768b20b518622e8212f9b8cf7f5faec3ef832ac1d0a2fda15c9cc92ad7df2d7" name="pcp-import-collectl2pcp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="23d3641de9dae598c7b1c39c7d0481de729e9ef6bb817f2fb760388eb2744f40" name="pcp-import-collectl2pcp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="aa714864551bba6f12a7a6922d8c8054f93cd47d28f8eed01bd4ce5726fe2a3e" name="pcp-import-ganglia2pcp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="8579ab244a2b54f52b77ce7fbce6058f9dddfcf4fa710e28226a208e8759f51c" name="pcp-import-ganglia2pcp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="50aee50c1448efef508799538118902a61697572ff2acca5f4ec3cf8c1c62aaf" name="pcp-import-iostat2pcp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="010e1c3dcb69ef3629d9d4add339e07e0b342c195c095b98f09784c1a909adad" name="pcp-import-iostat2pcp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="4e82a9f734decc696fd6c6b02dbd883b37623457fd84855b506e41f0893dde98" name="pcp-import-mrtg2pcp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="d12eb1a3c9d1b0fddc5981e4cf0bcebe2c09122b57a4accf716561bbfd44d740" name="pcp-import-mrtg2pcp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="f90bd06fc94d04f2e8891a1c8ea7bec86a3df231651fbc3e34636dab7d002181" name="pcp-import-sar2pcp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="ead1a302f81d48125eeca6eecaaee99588c0fd7827632ec892b89b0989898e61" name="pcp-import-sar2pcp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="580286e8e28a5d162f79ff567101b07cf31d807668867e67811bfc82158986b8" name="pcp-pmda-activemq" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="e9994ae2660e04485d566d99605b45ad0530dd711e695581dded0a6476fe985e" name="pcp-pmda-activemq" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="0f7bf7efcb62d957996030e47099b71890e5cb2d93a92fa8d360e7a4ee22c4c1" name="pcp-pmda-apache" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="21a72f8a73dced050a1afc4440a58b05da1a5f6a0724624744557343769eadc6" name="pcp-pmda-apache" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="270b9befc76d5239062c2c42a1ffd8e28daa1a1374d7c811fde70930401ed73f" name="pcp-pmda-bash" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="43295bd9796b2ba0ad800e2fe2d1d6248884975596c5d8a326feb3b614401904" name="pcp-pmda-bash" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="5134502e1c4b258c696e5ceb58cd8ffaf44d9eb2136af6fe1051a29b321bded4" name="pcp-pmda-bcc" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="b7f6b32ae095bf7cbf40bd7b450cd91f2bab77043ee7d4295c11674491fcf074" name="pcp-pmda-bcc" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="328cd749bed082f85bc6961f3acb74baff6a207a0bafa1d228c357c85eb3874f" name="pcp-pmda-bind2" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="3d964dbdd857991473374330c6986ddf9faa492e83cdd8c35a2dd5fdc2ab0b0b" name="pcp-pmda-bind2" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="467077a651ab058906261f987b0de485e6a77fa5a25727873629f79f92f57592" name="pcp-pmda-bonding" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="00b9b58442868eee952fe2b619d07ea2bed6248268ec9ee45dfd912ef3e62509" name="pcp-pmda-bonding" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="55216d215317d09a25bdfd7402d9c0abc145b7b6d9511d4e39a2e26d0b340f19" name="pcp-pmda-bpf" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="6ce8162f5513bb0f6f616b6ffe4c17193b8b9b58b02d13f23f3d46c5fdf25a17" name="pcp-pmda-bpf" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="c62b738afdab8ecb1b9737a49ebe206b26c6113b849c1c131f0164485de89491" name="pcp-pmda-bpftrace" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="a97787cc29ea56e9dfd38309d8dfa1ef90b879d2ff9fda6a99829761e00dd1c5" name="pcp-pmda-bpftrace" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="f7132a0623af6924f74c53342388feaf53e60c4aeb3e53dfd512a9628388cd04" name="pcp-pmda-cifs" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="63f5bb7145590a6dd3ddac2f76ed4be4c02f25e58bdd21d5412310a729524f58" name="pcp-pmda-cifs" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="6799624aacbb7fbfcc6a01319e33d8c03ca005003f9ba8ba878b8a0c11aea57c" name="pcp-pmda-cisco" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="9f74cb2b0af6acf56098e7ab317d03d38678a739574c955b8b740d3835b4849d" name="pcp-pmda-cisco" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="08d308613380b3697aa300c5093ddb09596f75a77705f8b9f6d3303df80a649e" name="pcp-pmda-dbping" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="251873608049ac3478f534bfecfab30e6252543eb4348fcd7f3a344408012f5d" name="pcp-pmda-dbping" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="05fd3b460ed824c7183c15bf2bf08d2401b5a883dfbe1a4d8adc899e957ab29e" name="pcp-pmda-denki" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="3eceef41f4db600f4438a49bbbda697f3483f5211ad015acef8d7681932ea30c" name="pcp-pmda-denki" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="5e2baec2e91e791c32fbbd5471c6bfc3ffff091e205784afe282c34a1e3a7b80" name="pcp-pmda-dm" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="ada5ca87f442f2a36124b60ef32e48a723383ec66159a9f1b845b8bc05872679" name="pcp-pmda-dm" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="c245a69a2b2569003a306fcb982855f946aa50002f6bd242887132427241f86d" name="pcp-pmda-docker" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="a8413036288b311495b1a22e0e886133209970ad49232eb2e645b714c465beee" name="pcp-pmda-docker" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="effc0da86672bc302fdf0d7af2fee1e62ef7e8791da2665e0852e09ee030df2b" name="pcp-pmda-ds389" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="064f68d7f536509fcb987901c03e735dc31881c4ed41c030fa3ded97f2386942" name="pcp-pmda-ds389" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="4a106318adc3940cc50e4b5f638a72c40caef95a9f7a859a16baabf03da077cc" name="pcp-pmda-ds389log" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="5004acc4d1c33a9261daacd51a81af1372572d332e766ca2c1cbcbaee1c8b2dd" name="pcp-pmda-ds389log" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="28f0d9c84530ebb08860e26ff53f097f6efe15642384c8ffcbedf36134c40837" name="pcp-pmda-elasticsearch" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="ef2d81d5f1a4e7b960759243f43188d7a5d07ed254436016f8b9ab4062bf8826" name="pcp-pmda-elasticsearch" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="37b1c24780165bc2f94d560a455851aafef03589498c334342ce018bd68878be" name="pcp-pmda-gfs2" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="0fc5403ba257f51b1158c35cd81a0e39310be9ec7fa0c4e62a0c70d79d1d71eb" name="pcp-pmda-gfs2" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="6d9b3bb26e795d21ee8fdd3734052efe70c31d005886a08d68f9b7e9334883f3" name="pcp-pmda-gluster" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="62ccee1d886abf1f2c2bfd7a5d562978b34c57b4db0a8ce0eba47f707df7136b" name="pcp-pmda-gluster" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="5d7b3e379e94b87f0478065a27a41aac55ade90f27d43b1600398de4669558ce" name="pcp-pmda-gpfs" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="eb524e5ebaec9230bafeb09609e7de5988cb3ff1107e30a1392a29ce837ee3a5" name="pcp-pmda-gpfs" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="e155f45750250222837c45d98190b9537c35f8407cc1d8ff5e9294a3f545fdcb" name="pcp-pmda-gpsd" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="0f6e9549c7347a0051477a943a8c08afe5719267964c67f6889fb44d33e19bbc" name="pcp-pmda-gpsd" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="891fcb5639e6e684d46f84e087834f3da17022079c943cf478806758a42bfee7" name="pcp-pmda-hacluster" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="fd1de5e2c4b70505e28310ecc6c313a8e74251f77920b66fa8b2015daaac5b42" name="pcp-pmda-hacluster" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="61ad1fcd216ed58373be3e2ff8826d8c8ddee2c942386ee2260164a06811bc0d" name="pcp-pmda-haproxy" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="e2807f5a7ce9558311d788818c512a0cfe232b5e27d64539cab12c0220830085" name="pcp-pmda-haproxy" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="da5ce64e9d4c906270c731deed2eac3cad69a465d3ebc169a75a293921ad352b" name="pcp-pmda-infiniband" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="55f8e8c72d3994ebcb073969385f41d999a0dc8a01ea6f72b5afc141f306b238" name="pcp-pmda-infiniband" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="af4fe3d966ace1a43ffadf9625b57dfbac6e085d74805d9801b8b7ad4b265340" name="pcp-pmda-json" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="670a70f057733b73fd5d548ae4f0cc74537365b5d225792ebeff374d3157b8a3" name="pcp-pmda-json" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="c6432e44e4b2e6267f06c2eedae4d8bc1fafe26cd0e81343f7081f314bf05cbb" name="pcp-pmda-libvirt" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="e738895401086715c6644eca9d91ec688c9b78a219e8724709c714a5afc51474" name="pcp-pmda-libvirt" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="aecd65dccf30f6e714966f508c957b74017d2f444e3239e3e5c7b31b90e92764" name="pcp-pmda-lio" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="c1a40d07c5925edda77738f68b7f32588a830a2ea3d528c0269aec1ae6d073b8" name="pcp-pmda-lio" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="128a8dc8cba31d35685de52e5782ab7277c92e535a81b10003559b85430d64d5" name="pcp-pmda-lmsensors" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="069aa3d532b3d1c88cfc15055e42509b573c2359650e6ff537df071ffbfd2f52" name="pcp-pmda-lmsensors" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="f5e7057efad66c72529b13db93c765969f22f0a04a227f0c6f23e5ca48ad9f57" name="pcp-pmda-logger" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="1995f853af28f30a8db040342b5ed513b2a5fa311adadad19ca83040d3c18bfe" name="pcp-pmda-logger" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="c2fa23827ade855a6a329f73472b56b90ceae1b4dd5e29a846595f31bb2433ae" name="pcp-pmda-lustre" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="2d537113e689e910781c674dfd2a9d5e36d05c207e80612a79df005a89958ee7" name="pcp-pmda-lustre" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="4dc6c58c940eb546e20fbe1c8e548619c0d81f7057cb48f42e07f38f4acc145a" name="pcp-pmda-lustrecomm" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="df5fab179dfa91073eb70801ca0f3dc664a1b1ac4959e34dc88b5a01d5ec9c2c" name="pcp-pmda-lustrecomm" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="7d14a7ca416282dd2af564eaa00e75a5acd039981355fb243c83648f0535a663" name="pcp-pmda-mailq" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="499ec1c2b82b10820f9933a40dd9581a7f978503729344792b2dfa5364aaa740" name="pcp-pmda-mailq" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="e8f3c5eba94eab501ee4825f1ae441d9a799718dd0a95b86e871920c01d361df" name="pcp-pmda-memcache" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="fcd87c30fc3bb5d7714b65d7c822a2c8a8f53138196106a7ec34145fffc9603d" name="pcp-pmda-memcache" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="679c598d5bdd507a214018a4de17d374bf7258e96b58c5b3b2969880315b3887" name="pcp-pmda-mic" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="6848646bbf597a833e48b05f048140fa2c6d7b1793130bbc95e6c042fa4652b4" name="pcp-pmda-mic" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="3b2474dcbecf49814f10b61ca95b0675c7a2f1ff78d34509aa1b0e0fed6e80da" name="pcp-pmda-mongodb" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="b3bed85ac136a600945a029d7dc7bc8f53f067730cfc7ec03479dc254edbc396" name="pcp-pmda-mongodb" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="86e40fda68dcdeed0ddabcd11f0b53f4a72fffa8efc814ba3ed3441fbed7ce5f" name="pcp-pmda-mounts" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="1c0a80d49aec4a3fea5e75a9b85f1b90480002f74b7d6e778702de0fc0d2328f" name="pcp-pmda-mounts" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="4c62e0e049182d846759f08ea5e2347f5d3bd98b56e07bd394ddc3464c5be42e" name="pcp-pmda-mssql" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="f179e49dd9a81bcbe3c58e422ec129df34a023e1aef46d3c6317ee5e3ed9c552" name="pcp-pmda-mssql" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="23166ec1d3bcbea79a4e9e4c2855410c112b46a5173dc3127c1f5f4064ad6394" name="pcp-pmda-mysql" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="10f233200dc51586cc95fa655069470c2188aaa5cad7499a2edaeb39a3ed73ca" name="pcp-pmda-mysql" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="071939c161f33e44ae73e8a4d0176124883fb3995d3bfaba175586aad6c4c6f5" name="pcp-pmda-named" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="f6f44db36d81669ca4a5d65d8b332a4911c652220ba576aa94cf3e0463b3b238" name="pcp-pmda-named" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="e56643f8c91c569328088916e54ee511aaf0d56535937e44cd616ee6e6d6318b" name="pcp-pmda-netcheck" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="90299f4386b02dcb21f640bbe5c9a3fdac5b4127210a9d344ff4dccc3eb195ee" name="pcp-pmda-netcheck" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="7123d9ceca2d3868c0163f689d3de68ba4a79ee6d16174dc098ed50d10f19c53" name="pcp-pmda-netfilter" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="aafaf40848e6cb0f8082c9637fde52548979e64dcb33cebd42bb9eab302d04b9" name="pcp-pmda-netfilter" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="3d1164cbe59ffe404752679e0d56bf0ea22f84ffa65bbb9781e67f79a1abe769" name="pcp-pmda-news" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="6e49f5b7143cdc604757ffedd5d4c80e4b333e22e854628bdcd0e9ecf9c8c7ce" name="pcp-pmda-news" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="07dd3acb854a6605d43f34b39f9478c193c9e8d852806d90b085042c592ea222" name="pcp-pmda-nfsclient" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="2f8a4f81c4785e0bf030294718e484bb75a46de2cf4e938103ebc286a2510a5e" name="pcp-pmda-nfsclient" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="c0d37cfe37327f21de2c34c468da6e9de14e0f9eeb2c4bbd76213c2333027d45" name="pcp-pmda-nginx" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="f19343a7afea697d2cdc5d079a18983017d4e5db36630a7efcc9a097f866b87a" name="pcp-pmda-nginx" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="b239f25299249b092910e8fcd34e1a3ba2320a3d352625b338473b526b35464d" name="pcp-pmda-nutcracker" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="d28954133522baead7d6bd23e4e7b4d1798936935518138c4cff55d79b8d6c67" name="pcp-pmda-nutcracker" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="c83262eee77831d01545d7fd92b5c78a91ffa57a1efb43579bfd378bb5f12452" name="pcp-pmda-nvidia-gpu" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="ae0c439d736e090d590f4a62315ab76f0dc1b3260d16a52bfc1d4d48d7706fa4" name="pcp-pmda-nvidia-gpu" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="92f9afab64056ec5d15ebe5078e7558b5f2f2702b5481375015f97e4e407f235" name="pcp-pmda-openmetrics" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="2ecb7860f3d71086a8b6fedf26d133f36b9a209b0c429b6efbb1e7514141aee8" name="pcp-pmda-openmetrics" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="fb886267a0debb81efe6b0fd59e95b99c017c378ec70202f25237ff846de6d08" name="pcp-pmda-openvswitch" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="dc714d62a614de8de01180d1b172a226e35c59d28f342f4c333b7afc47803bb6" name="pcp-pmda-openvswitch" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="c34ea4f89d6636c8ace744a41dcc7b1be407138a7294c8b6513b0bd4af693b0f" name="pcp-pmda-oracle" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="b1b53fe619e5cb8bb4a5858fd850a5968b092bf9e92a9575131cf7182591bf8a" name="pcp-pmda-oracle" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="4577fed2aad18b8611f385e35f7a13730aea9074165a40e3ee07e21a3abae430" name="pcp-pmda-pdns" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="e70d80998b94f5937b437d0e8d544bfeefe6ec24585bdef1e8fc4082689120f7" name="pcp-pmda-pdns" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="84e76c86f25280f1c3e620b97d9715e7528351531889a774ab89620dcc17ebef" name="pcp-pmda-perfevent" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="e1bc52f70011b0cf624cf7aca24d8f541b025b59629b7ca06a6b0753ab13fcfe" name="pcp-pmda-perfevent" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="efeeb50790f32f6447b4cf1006758347d5aa10815024c2a1261a46af4d538a93" name="pcp-pmda-podman" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="60874c621d9f2415ebfebf3b5640a3c5dd5e17bc8d3083d227efbe0ae0b93a3a" name="pcp-pmda-podman" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="8c7cf62b78ae861a9167770823bbf8732e49368e22426a21ae24cd824046df16" name="pcp-pmda-postfix" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="00d1e4fd419a28107a606d8588b47ee9b62b2152f63b1acb5d9b4b2630b0af1c" name="pcp-pmda-postfix" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="67c26d4069ab9f945d5bafc0842f116eff5725e79b2d0c850089227865ff003f" name="pcp-pmda-postgresql" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="b6b909283f9b394a4f9f84f31875d02d750f420984281598260a304777e81193" name="pcp-pmda-postgresql" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="9a97c1094ae874521f66ad6ea78440c48d9e88a0598de8f46186d9bce836cf5e" name="pcp-pmda-rabbitmq" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="73cfccc13adf0123883fbafc30ea75671dcb5d3361051c122f48bf7d6542d4bc" name="pcp-pmda-rabbitmq" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="4a488b7197259ed817aef69df997e327ca7d1edbe42e32ae69b2aa4468d4fd8c" name="pcp-pmda-redis" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="2060798e125c5ccdc2b1a3b060de9605cabf6299862242146896882be4c9e4dd" name="pcp-pmda-redis" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="c54f5afb4ad97ae5e19e5036d702a169099dff8756b98900e0af2724f8931fc5" name="pcp-pmda-roomtemp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="f084844e2aeed703a2eb406351e501555c8e71115e37ec7bc57c5277b133fc44" name="pcp-pmda-roomtemp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="cd908596adfe189fdf98eed6893a83377b67e483417f07c0368f3943b46d5617" name="pcp-pmda-rsyslog" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="87a4292a3e8de5acd164e7f0f2273a26bb3979839f1b8a16d54afa185466ff1b" name="pcp-pmda-rsyslog" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="ff9df3d112ca556f58765f70bcf0c698fd5b70529cc4b2655be3b2cb07e77b64" name="pcp-pmda-samba" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="14eb1262dcabf006baa9651d3271a3d008e58476b0355f4c4a6177d10625f121" name="pcp-pmda-samba" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="d57c836cafb52fe3876de41f7f0f200a9a5bebc3ade33a1b92596429225c3c99" name="pcp-pmda-sendmail" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="d6c19cacb346990547ccd21d4b4b8163d5bf25d5537741a9a563d310949041e3" name="pcp-pmda-sendmail" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="cdaebcd051a77b4c9657ffdf94087ad9cdf714de49c52a95f8f0075e1f36d46b" name="pcp-pmda-shping" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="04b1b1a2491de23a1a497d273da20bca280b77827a3bb73d4977ee5f9fdf3bc5" name="pcp-pmda-shping" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="5e8adffa772ca2780013a4bd988417d63877aabcc155ef4e495208e55b72ca01" name="pcp-pmda-slurm" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="72393fb5cf81195d66cb5d039ab518964e779b167830a14ebc52f66ec0b31bb0" name="pcp-pmda-slurm" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="5e669c40f81f69de64a4a0fc91d65126bbf5c8a36f6c29532e96799fd20feaf9" name="pcp-pmda-smart" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="ac45de867c3377a61f5e0b14af7c930520e7d74d7a6d0116ca9286ea0b268f16" name="pcp-pmda-smart" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="879229ebce339c8ce7a7f202e3f5da88637c1f4f740fcd93c1a08587578d0b58" name="pcp-pmda-snmp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="6b0bf9914cb293c8d6a9835bf46a97122e9d1fb8db5ea7dbafd9101be5da5fd6" name="pcp-pmda-snmp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="df757d558057e88e3d3ae6e3386b253bc3095d0bcfbbf1d27c5000c1fa6e9376" name="pcp-pmda-sockets" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="eb0e97ecd8ae9cfe7145d054f983b6c278a5ffc0e0ac2b0c56d9d897891b3dce" name="pcp-pmda-sockets" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="3ba137b0d9eaf8b0a2a188d7ae9a3522f7381fc4ce7917ab544e350bb04d22ca" name="pcp-pmda-summary" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="810b3623e86add1e8a2ba3d868e06369dd19ee2ea509aeface199302a9a43bf8" name="pcp-pmda-summary" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="efa9cac087e2e5e2c07ee91b000009bc0b906bacd2b63317d81c962094b0d4b4" name="pcp-pmda-systemd" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="93643bd1aee9f52a5f8980545ec1fa3c45ed72dff8e72a27c83e6472e8f372b6" name="pcp-pmda-systemd" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="cc24acdbad558a197250ab7358e24e0daa33987f928a47919ec935f424a40624" name="pcp-pmda-trace" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="e48c922d6d0ee8994f1dcbb41ea1f100077b0e5eef022f4f744c89ffd4d0ff21" name="pcp-pmda-trace" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="7657ed5913e2aa2131c496679a94ce93ab38386b141d09d9f8502498b1bbc5b8" name="pcp-pmda-unbound" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="fbd91615cb49211b165b4bee85bb7a1a5d14474322224c818794bf2750a9dcc2" name="pcp-pmda-unbound" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="14df6b8c139805e7c7e55a409914fa6127285fc59dafb1c07e3838e858780146" name="pcp-pmda-weblog" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="a83213fc6512aa7446f63da49e18859a66ded6642b80643e8b1a6d4994d3d5c5" name="pcp-pmda-weblog" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="d90f93ea72748a8a64132002ed0a8427fd0f59fde3a1eec9b322d56e968f0e5e" name="pcp-pmda-zimbra" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="6879a1f13dbc23687ff99127c4fb0e27678135317558ffe896f8001ec952e9a7" name="pcp-pmda-zimbra" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="58c0d500a9a216df4a943f0aaaab732b9738c8faa4b48b5c78b2bb2fb9960e02" name="pcp-pmda-zswap" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="ac52a92e3cfaa40d98ff43deae21dffd00cca213613530e979e1b6eab96ad94a" name="pcp-pmda-zswap" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="b6b7738e574b6527b80bca0e34ab9f6164bd316cb923f2cf6b10e597e0e64a7b" name="pcp-selinux" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="93d4b2552b818e96fa55d5ca2125c0f08328c76ba78be375201e71c82d91c1cd" name="pcp-selinux" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="769b3933017474c59aed7bd13a99577653d5cedc82f2ef02b358b710b646f409" name="pcp-system-tools" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="2ecd739331687984d8f2025761d7edf5e32fceea24a87d3b423ae2a7760b8415" name="pcp-system-tools" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="c526b6cfc158e4391fde2c907bafe32eaef99f813f09f09cc88fc0e9199e3397" name="pcp-zeroconf" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="fe09c41abbf491d68903f8cb4987035b850c1eba9ae9357ce1ada3d68a29f6c0" name="pcp-zeroconf" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="1fa629f36fa530d089b0d770b55d1bc5291073db4c07115864e02075cf9734a1" name="pcre2" arch="x86_64">
  <version epoch="0" ver="10.39" rel="9.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 10.39-1" date="1638360000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update pcre2 to 10.39</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-2" date="1653739200">- DESC:fix CVE-2022-1586 and CVE-2022-1587</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-3" date="1666094400">- DESC:sync community patchs</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 10.39-4" date="1667476800">- Add sw64 architecture</changelog>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 10.39-5" date="1668427200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix build error for loongarch64</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.39-6" date="1669464000">- Update the Source0 URL.</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-7" date="1678968000">- DESC:sync community patchs</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-8" date="1687780800">- DESC:sync community patchs</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-9" date="1690804800">- DESC:fix CVE-2022-41409</changelog>
</package>
<package pkgid="b2b6084f8f4c14688d455910af3cfdc0d253d59702c794e5747e75867eeaef83" name="pcre2-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.39" rel="9.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 10.39-1" date="1638360000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update pcre2 to 10.39</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-2" date="1653739200">- DESC:fix CVE-2022-1586 and CVE-2022-1587</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-3" date="1666094400">- DESC:sync community patchs</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 10.39-4" date="1667476800">- Add sw64 architecture</changelog>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 10.39-5" date="1668427200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix build error for loongarch64</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.39-6" date="1669464000">- Update the Source0 URL.</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-7" date="1678968000">- DESC:sync community patchs</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-8" date="1687780800">- DESC:sync community patchs</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-9" date="1690804800">- DESC:fix CVE-2022-41409</changelog>
</package>
<package pkgid="c0c815ae9df59dafd700a82cbd86d268620b6a89c86b4f4948837c7faad41054" name="pcre2-debugsource" arch="x86_64">
  <version epoch="0" ver="10.39" rel="9.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 10.39-1" date="1638360000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update pcre2 to 10.39</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-2" date="1653739200">- DESC:fix CVE-2022-1586 and CVE-2022-1587</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-3" date="1666094400">- DESC:sync community patchs</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 10.39-4" date="1667476800">- Add sw64 architecture</changelog>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 10.39-5" date="1668427200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix build error for loongarch64</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.39-6" date="1669464000">- Update the Source0 URL.</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-7" date="1678968000">- DESC:sync community patchs</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-8" date="1687780800">- DESC:sync community patchs</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-9" date="1690804800">- DESC:fix CVE-2022-41409</changelog>
</package>
<package pkgid="79144ee97359ee34180616bde25dbcf84ca2c7394305b527f70d32cb3b316ef9" name="pcre2-devel" arch="x86_64">
  <version epoch="0" ver="10.39" rel="9.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 10.39-1" date="1638360000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update pcre2 to 10.39</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-2" date="1653739200">- DESC:fix CVE-2022-1586 and CVE-2022-1587</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-3" date="1666094400">- DESC:sync community patchs</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 10.39-4" date="1667476800">- Add sw64 architecture</changelog>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 10.39-5" date="1668427200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix build error for loongarch64</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.39-6" date="1669464000">- Update the Source0 URL.</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-7" date="1678968000">- DESC:sync community patchs</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-8" date="1687780800">- DESC:sync community patchs</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-9" date="1690804800">- DESC:fix CVE-2022-41409</changelog>
</package>
<package pkgid="09d9668ea59c317dc093ca8c0e31688d62864667f43343ddc7242f9dfc2f3cce" name="pcre2-help" arch="noarch">
  <version epoch="0" ver="10.39" rel="9.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 10.39-1" date="1638360000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update pcre2 to 10.39</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-2" date="1653739200">- DESC:fix CVE-2022-1586 and CVE-2022-1587</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-3" date="1666094400">- DESC:sync community patchs</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 10.39-4" date="1667476800">- Add sw64 architecture</changelog>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 10.39-5" date="1668427200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix build error for loongarch64</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.39-6" date="1669464000">- Update the Source0 URL.</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-7" date="1678968000">- DESC:sync community patchs</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-8" date="1687780800">- DESC:sync community patchs</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-9" date="1690804800">- DESC:fix CVE-2022-41409</changelog>
</package>
<package pkgid="19715b058ef447d60267cfea78cdbfa67f76e229d0bcac0c3d06a24c9db0140e" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="f137264a34ed8fe00270525e1350146bdd9aa24dc17cfe1557797d7d00f9a7f5" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="46c7f57244c4a9a077d04e35f43d385cc041626bd91822ddd9e4f1320537f283" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="1e5fdaea136af26d4d691433ed8b48c8239a89a4a8cb68dda2461c1245acec36" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="48fa533975111c32fe1820562658475ada1094c53cf05d757a43b19f37681f7c" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="b296d0e9a5530afa8675220c9ca69d1e799a2f948e218d9272e06332d48452e6" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="437b3014296ce6b94a6c89f3425acd64fafda36f95515c86d730e5a262d8d3c0" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="d9a30421f072538d857fda7df266817b230abe5ee023929282297f87108c0914" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="b124beea1eb1b7cdf712ca04747c263a5904d69fe1b36e52218b9333ba61f2fe" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="3edc597b480e4d5ee160d46030bbe79ea61afe745fe8e1748ef77f98ac420f6f" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="af326414a610ccf3550c58bed8ba98d997efba9404bf6994031b7118c728a247" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="021edbbc8749df5d103dac94a6436742eec7c5837835d52277538a2d320bbdb4" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="ab9fc6911e9f41d4baf5d3a2807cc308cf13c5271c1d984edd83d0e8d1884872" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="f750cb2bf2ef195a767c8ef32a706af5a593637fcb5a582216e468afa525fc8c" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="1ecd3d975553ec640a5e47ae70b57ad6119d4b054bdfdf2ec0feeb4791e56605" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="cba7b94deee9805887165e13cc84326da322128fea53f7e16d450fbba8faf218" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="d87c900088432d61aa363312cf91e8736452ce9e7936f0df93fc2c4b9a1217ba" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="49e69cab0065b40adaa9f11942d7d8601c88c6af8ffdf32efbf38921d0b9138a" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="e0590d62985d730ded6c63477d6659c8181fd5942a089cdf9e4746d292f04c1e" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="f7d715f4ccc5059a7d6104d672e2d52863f9689c5a06ababf3b4400cd05da943" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="a56de5a8bf08ad0f74aa3540e817c5f87f1802f7336e2d751acc5be0a66e4f65" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="bbdafe1c8514ef398baa67c4d4f863977209f7798a85953dc743ac5c104d60c4" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="635793b1157ef5daf817aa1e0b9a35d51f425cf61f9f476b0d7ef16c77d9e902" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="f7875a900397c67f1112c5d72e7d14f5daadb1b401a9ccc82d4b154bfee58e03" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="ead014d307565fd3bcea0bc96ea264f013c983734b350a88dd620493fa822c4f" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="b05349009f077402adcc0f2b17aed29b398737b0af121af1ea05fcfe8197ab08" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="24eaded01dde3c962436d0fb23df19bc71cb4e681eab4bb04ab185258f9affe4" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="e68645d0acd8754276d75f5076d09eb52dca1df698056c1da51ec63b9937a242" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="84418343752d2425a0189fef0ba30e58996c94afe6aacca486dd5e3054b9044b" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="a85db8b46e124d1734c3041c629b991f4595185fa890b0ee3546d7e40bb41457" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="e302758c0536bba96dd768cd06c2d10a3048f32792f784f3790aa4eb55a99bb3" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="76ab6d6ad8adddf86f908c5dca268ff3b075752c1471a589f1528d61fd650a93" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="3dcf6ffe1b3f825d993cb4753771a6bf53d4e7da677ab95543f97393b9edb5c6" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="c64dcf8d6dedd31f34c93f84184a555775c3383b5c07fbfea42d773012f5fb3a" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="3f6c195fd70afe7306fe063af24f44749bc7d9297df1238853b01697080eea4a" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="a94e184a05d27c55afcc22909321951337df968d8b3efa7968fb44c8e1f7973f" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="1b48c0bda86e5123ce0063c70ad0d8dd9ec7508b8f20282d155595f510204a9b" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="d206fc16dcd4660d1877be077cdc5f3d9399b1e44ac0cb8168f3fc4f7b8b7a40" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="79424c259457351e27eab3747e0f1429f3240795803f78edbf0a529802c9d8fd" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="d465df623fa424eeb0ebc7313cc60fd2feff258b9cebe531727650f0c3266ba1" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="783ca4311a8bc85f016379984bdf0c032ffdfd3640f0c9d7bee3a00b3c86b49a" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="cdec0a13d57c0606e04a5300a646dd62c423913cc8d23302f2132c26ab05ef40" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="d1a17f86535870b8a6252f4238a0d95f250ffe6dff5f26c6f4a9634814f2a253" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="bfbaa4b0fece4ca43b51af6a603da26e26ba30c73bcf9c751165f32b0670dc1f" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="b0b87b2a9042d528b913e03e034ee68402eff7bc5d8ddd7eb3bfb96164a3f026" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="1c83e227a371f1ebf1f5d9776805374ca57b0d2ae3cd77eb94ab000ec5a8a910" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="b30e1be8c879460a244033c0ff83d20de27943b1deeba31c67d23853fd40ad47" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="dd01b001dfcc3d5a334ff9d88c56f786925b439f8398279113c4794a22818693" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="5c29d7ca8e002f6d04d2cf91436749a5bc9cc0575537bbd4c488b173b8cdc9b4" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="988c896900e64b32935c9b2e2cb4f19f700ccb76ef43f4be7c911859011a666f" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="6ff937423f405460a8afe2cb32d959344181c4a47f5fba91944341d6aa5d8a0b" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="396a5a4bc4caaa892b9cd77a59fdaf93abfd216f88495641552fa40d505614a3" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="1fad6e27d42721a9f3858a0cbe1a579ede1d001750a7b4e2440f5eea62ffb783" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="936079480f5f08b7f86263900419244f0946820ce730baf74f53094f8ad3dfa2" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="f628b741d941ed15cc71403b3beca8ed02b3f1c0d23c10a3af7e152bc89a6e46" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="48bbc1dffab9a554859c56abd6241967e4cc94639c5a2820ff58a3678c0ff1ba" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="c2630a54ff40d856ca9988f1fdac241066e9b7b5eeadac99ef9dee94771ae2de" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="8a5945dc1d2279143d5172881ce0c31800bd991cbf5b9fd67caeccba0c44b250" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="17a4f698d81a3524cc6d9f617f6c4ad0d1c2476d0a05769da5ef90cb01fad31d" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="3da4a14791dddc4c38ccde7c56aafdf9b889b5bf8b96cb89123cd58d1acf8cc9" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="b4423294f11d45bd7cdd83c776af8ee8ff572f979fc429688760e823f9d9c30d" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="26d728149806f428fbee4c4e367b80799cd1bf06b4912e979f0aed336361967a" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="a77ffbe322d6a1411747a4d3e436d367ff793f076139266734c03eb6dcbe3445" name="perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="5ea42f2cf7e8e082dc08e07b575705552904e3c15077691b3370f6242e71bb14" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="c9254cc3269b8fa12d4fcbaae6016e32518c0efdfe259ae97dcfbd0cdc078323" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="e1c884431f01fa978cd24ea5691445ebfe91587db22b3b86f15a320652021cd4" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="dc9dffb6c518e6fa017b9edea3a14a00452195f0e705639ed1640cf37e5943f2" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="902b2d6ee45c5cdb5b6ed27cd1c2e1ae4cb2ccf26e5d88bc9f392c4ec82bf7ea" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="b0f98bdfdfb62b27f93e7777d80e751fb37b9c6a9829f31ded7051cb3a5fc8d0" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="70338f56074b69a74450bc4c5d668ce79c2655068a245b921fe2ac4a1ea28d61" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="703cbdaf4035102e65b2164bf9d530d8dc841f39bc91cc2d1c413fd8b6932993" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="f70c5c8fc2b021546f1ddcef83ffc4a097bc14c0bac69afd4c18749b4bd25a9c" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="dff9920dccd1307dd4ea49e1d6492fb3ec1f2ecbe8b99b27ee0c82ad0c808219" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="bc4d66adc0b99dfc2836f6bd42f994194ae2a00e8755e014246e1e30f0b8c4f0" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="35aef1df075139d55d70e622e299ef7d5ff8cb689661ccdc42a2537abb5fd5d4" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="b206986505aab6eed9904b3cfd41b8f539261b47fd386071b186a9615607abce" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="015f364cbf93f081a0d5db50d9f28334baac341cc34b47c7660dd1fb6a7f7ea2" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="47d3065feb798839db3e07d823c104e3eb8245353291f435d43b9b3a9f029b90" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="9514b290deed4e7799b4bb51f4c02cb0acbbd7be3bfacc575113c3308ea375d5" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="8a9ed822002648286fd27894e11dc81c44129810ce677b7e0a6e9a9d71be0bce" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="1056a1d9f0344fff6f1c3c0d26fb14870b2816c71b372955c9143cfb7fd42d8c" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="9dbf60734cd0300cb7870589387c6d2fd7b4abc989fc1f07aef971b0dc7334c6" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="42db3a28be06d7b2afe54006b1e17af55c02ec66f46236eeffd01fad2fec6948" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="4637188bac82c4741736244be5465f0b36a4e894df266601e6644e92e03e0a5a" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="e226b73baf7373467a73ae0055c7f1d5ff144082ddd23f56d18322914a089b18" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="173a341dfa4134dbbd76cf6028f31f9bc2806d99e4545e2cea186f65bf1d0674" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="54b9178e181ad24a8e179524ad6ed8538d6cf3a832082767360440fc9ef82382" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="500b0cbfd0ead0d67bbf21ddb951343e8b91ab7f937a8ded33d4179fbbc921b3" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="d08f02b5edbde30f6425e65ed481ce350fd7dce5eea9eac6fb95ef74f95b6475" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="f21ad804e313b47411acccbafe568f1a62a2aff9ea0c1a95d5c82464b852874c" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="f62162535ee51254362dfcb7a6fdce8457e8b4d17d8aabf750d69faf36e61a77" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="cac1e0a6b979f3762ac5adcebd6bfd650fff8089d821c5e039e0540a29bcff5d" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="ff524dec0e13ad7330fcaf8b2a14fc5fee6047cb4444f78559aecdc9ab0f1ada" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="455eb28a7507a1ae7455cbfe03532c78044c1a7b5e4c9483d5426f144b5c81e6" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="f1d4c06d97b9f0050429ede0f1b8e30885c3fe3285816f2b9f357d93865431c9" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="753ecc4145cc13b7268edb7662bbb2384e76bb5f77a7efad079a7c87bfacff1a" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="a81317ac563394eb25c476e1bf1d55203e41d6b12e181c75569b77b184d217d0" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="8f9347238b21a08c10f64fd03527d87a0de26fc2b4651a7b96c9aed8f782356c" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="67442d3016a40dd0ae155b0a531c7da3988665f2dc20597762de7ed2da686946" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="b6d44f5eff8fa717a55ab62589ad0f8cdb37e41c8c15c118a9b488bc0922f48b" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="60e2a66101e9d4256efbbded5996096f062da2115ceffe635c16be37f7a7f2cd" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="9caa73c5e1e2e3c9750c2a230c0a9ef69988943c9c8013836a6b3da57589f805" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="5e7d50dc84bd7fac9d89dbc89cfba206d54eb0670befd0a03513f50e424a9cb8" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="b90d01d7821f026abbbf3ddf33d6a4712a2e6412c8cae258e5080603fc882af0" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="be878accc0d9b1a70c34ff22b0b3b786198fc17b1776fc9a4047a79ec4e7bb95" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="390b5ff297299f1f421c70fcf753e1369a56c13758b4dec61ae55453cbf54e63" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="49d8f2da30f7a4b80c41c4bae00685a219f837b8feade8b889b9bdcd9d79959b" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="5e61d2ecedc4cef629baa08721295f63ea21eda00fe9e700ee65b503af575f34" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="fb8c45b545c40c5e9effbae80198c68d9264e88302e93239c7832b3da6275b1d" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="b27cdcd5e52cc95c6aebf054c4d93d409aa80699bef375eae12837fa78d6d2b1" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="f2bb7fd9f154d905316f58fdb5d3ea0c4be026c535f09c7ccf508cb0531f294b" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="31276f7f931034623c10200a7b413e01a5eee5f75015d0a2ac728ac1517c5bcd" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="94bd1595e0a1f9e9906170ac1bcad33857eb64f2b58bfc39da9a35c3938519fc" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="6c364c3e89e090c4a6a17aad5402057b702217434a22b88804beee7c9be9801b" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="7d1482040e052626dc6ee51459e383c4a5c50c68cf4a9c237fac1a09a1a72d24" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="423fed358e81e96caa7220a8a1e44016de3e6b91c91e3a4012cf5016701116e8" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="7502c09a6404b1781f3f6ec67ba2a6361319883d469cb33cad975fe237c401ef" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="b7eb7045c284f2153c14dd372562831451c1f2ddc327a16cc2ae7f32786b6cfa" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="35e79f0aa217711c786e8ff4e4e1a0f2da68cabebf2c74f6b552a3e06594e0e6" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="ed942cb348e3c049451165a2d5fbd345ad3e91caee2eeb7137989c630d39b799" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="c6d3d3c0bacb27f916f5bb661a66a10294758fbaeaefb3d56a8056cd42ac2db4" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="4d9e63e6d0a808759eed1cc9652981bd4db91746c70156f4b10c6296e6d272a0" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="3055aa1e1acde3cb43561cb54336f316a0be48fda30e41e2f7f2146afb0af296" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="5a99d8af6c1fcae569dd423d32da72cc0fa6ba38dadc52d8fba3d1383fff6900" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="7ce7e5d49d8ba0c0d4aeb7820f9d72572787501cff6794ca0ea2f53425cbd3a0" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="c20f08fc4b2dae9d8b62f1e1b5d913bab7a1c44335044d43d4699738e42f8d40" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="f45a5047a59831ca3d05715e7eb4a467f298573366961e01a6c57827f3a0b606" name="perl" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="10.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-10" date="1701086400">- fix CVE-2023-47038</changelog>
</package>
<package pkgid="ac490fbdf45b2b220caab46ec1dc381807975894a5c10e8b2ebca670385e2b2a" name="perl" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="12.oe2203sp1"/>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-10" date="1701086400">- fix CVE-2023-47038</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-11" date="1702036800">- fix CVE-2023-47039</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 4:5.34.0-12" date="1702296000">- Fix CVE-2023-47100</changelog>
</package>
<package pkgid="a123eddf833fbc894e5915b73dd7ed04154d23e94d6f516b0a8489fac6632621" name="perl" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="7.oe2203sp1"/>
  <changelog author="liudabo&lt;liudabo1@huawei.com&gt; 4:5.32.0-6" date="1626955200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:deleting gdb build dependency</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-7" date="1628078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove other release-related information</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-8" date="1628164800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove perl-devel from perl</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
</package>
<package pkgid="424dd229f77812ce4798afa28ae092a8c01117bd61a12d9c633875231bedcbdd" name="perl" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="8.oe2203sp1"/>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-7" date="1628078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove other release-related information</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-8" date="1628164800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove perl-devel from perl</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
</package>
<package pkgid="77f8f429b9c12a4a3e500b486dd4e4686330f3e98568346357a335174b485afe" name="perl" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="9.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
</package>
<package pkgid="7804a138ebcc4f3d92b4625ac4cf077a59ea88dba838ba01bb25c02cfc47562e" name="perl-CPAN" arch="noarch">
  <version epoch="0" ver="2.29" rel="2.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 2.29-1" date="1644494400">- upgrade to 2.29</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 2.29-2" date="1688472000">- fix CVE-2023-31484</changelog>
</package>
<package pkgid="db88b7882b5c6be22da83e6b153130fa2f5d3eeb2f4d8ae4f1d509031b672723" name="perl-CPAN-help" arch="noarch">
  <version epoch="0" ver="2.29" rel="2.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 2.29-1" date="1644494400">- upgrade to 2.29</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 2.29-2" date="1688472000">- fix CVE-2023-31484</changelog>
</package>
<package pkgid="d2d8f92a8fb69dc12e6059ef3dde80b5f67b7afd9fe661bd53798ec4738321fb" name="perl-Git" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="aedd682b0c0ca43a0a8c5d52e035efefdc32413ba76d522f60507732f2c9a375" name="perl-Git" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="65f803b57439de0d56d6ad8eb3a0347d0fc7a7225387581adf1883bc70847ecf" name="perl-Git" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="da2167a9e520be2c84f6c25c4e101d5c6031d4e580a9720ef4a15a1725313be5" name="perl-Git" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="f95a2be9a117db63ced578ea0b2252c1176af5047d705e75e0e552198c118e2e" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="2a8738defbc9aaea1530a2f143682be4c5fcc89e62ddb599ebaee2db277ddaf6" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="e311b85c12fd8f335f32b04211f4010528d697e55542e13f74205f670ae80c73" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="5742fe3bd91491f6ee69fcb453e1169655b2467df5914a6412d1a358f9de2d6e" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="d988289df5b27d4da2e565fa3a5b2794ea06fb4bf2b70642fb7bad0cf7f7e3bf" name="perl-HTTP-Tiny" arch="noarch">
  <version epoch="0" ver="0.080" rel="2.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 0.080-1" date="1640520000">- update version to 0.080</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 0.080-2" date="1687780800">- fix CVE-2023-31486</changelog>
</package>
<package pkgid="bb9f300cb22baad42ea7ce41b3d58910818048696df9179f5234ae401d688aea" name="perl-HTTP-Tiny-help" arch="noarch">
  <version epoch="0" ver="0.080" rel="2.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 0.080-1" date="1640520000">- update version to 0.080</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 0.080-2" date="1687780800">- fix CVE-2023-31486</changelog>
</package>
<package pkgid="20f5ccca200ffb21bc5c721024297489981b284b825bc19f854231bac04592da" name="perl-PCP-LogImport" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="bb4db14a99d5db5e15f316097ac95d3f22a71cd94b773c1abcb65677f9de162f" name="perl-PCP-LogImport" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="a4a02a03d53073b2dad54b4582b4201bb8547030dcb0298824b2c26a50dd4852" name="perl-PCP-LogSummary" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="92530e7fffd411d3c6481379809ef413d1fb9f7e911e29f0ca54b3f62f5ae0de" name="perl-PCP-LogSummary" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="5c59d39bada1c12a064e2cdcda59a1c5de191e6a3bc37f105ee2faec66b40ff5" name="perl-PCP-MMV" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="7d42221b779063f1978a545e25f02d07990d6cb97db86f20d4e8da6ba2405c07" name="perl-PCP-MMV" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="e28caaca47fc990b15f194ba710033eb2630943b728fd232e2981bea8d8dc324" name="perl-PCP-PMDA" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="9ea3854a21fe2b097c83ffc44d7282478f2fb9177229dab90c9a337803a3d492" name="perl-PCP-PMDA" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="2642f3ef6a3e18f3b06e8625ece645070a708c0737815dace20ddc65f5822cd5" name="perl-debuginfo" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="10.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-10" date="1701086400">- fix CVE-2023-47038</changelog>
</package>
<package pkgid="b1caf76762d1e56b56cb8499a78f04aefe0a7a002df4bdaad7ed8fad8dd8d3b7" name="perl-debuginfo" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="12.oe2203sp1"/>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-10" date="1701086400">- fix CVE-2023-47038</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-11" date="1702036800">- fix CVE-2023-47039</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 4:5.34.0-12" date="1702296000">- Fix CVE-2023-47100</changelog>
</package>
<package pkgid="7d080490a4e5546cba5a0946387b38426455b3eea07f85120999f9f105b6bcd6" name="perl-debuginfo" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="7.oe2203sp1"/>
  <changelog author="liudabo&lt;liudabo1@huawei.com&gt; 4:5.32.0-6" date="1626955200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:deleting gdb build dependency</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-7" date="1628078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove other release-related information</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-8" date="1628164800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove perl-devel from perl</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
</package>
<package pkgid="1ae1f7f365e07e52ea73eb25448a0196fe4e8c866d43fb664519ad66d8a71f33" name="perl-debuginfo" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="8.oe2203sp1"/>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-7" date="1628078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove other release-related information</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-8" date="1628164800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove perl-devel from perl</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
</package>
<package pkgid="31d249f751f6c53f5a99c4af74b7191a5e300f6af1fc4d6035bfe491104990bc" name="perl-debuginfo" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="9.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
</package>
<package pkgid="665c24dbd2ff99b5ae10e4c01f3160e0615909ce645248728ba149295803cff8" name="perl-debugsource" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="10.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-10" date="1701086400">- fix CVE-2023-47038</changelog>
</package>
<package pkgid="689ce45dbd0ace255df382b9a7adf1ef9b015e87436eebbe6efdaf7e38fc163d" name="perl-debugsource" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="12.oe2203sp1"/>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-10" date="1701086400">- fix CVE-2023-47038</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-11" date="1702036800">- fix CVE-2023-47039</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 4:5.34.0-12" date="1702296000">- Fix CVE-2023-47100</changelog>
</package>
<package pkgid="8cea545f448562f274ea10b786b7672d7e8cf69665f34d41d8c4fbc823799ff7" name="perl-debugsource" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="7.oe2203sp1"/>
  <changelog author="liudabo&lt;liudabo1@huawei.com&gt; 4:5.32.0-6" date="1626955200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:deleting gdb build dependency</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-7" date="1628078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove other release-related information</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-8" date="1628164800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove perl-devel from perl</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
</package>
<package pkgid="8dc2f5ecff28856298333136969028e6049e42ec156a0b47733d34b379297e83" name="perl-debugsource" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="8.oe2203sp1"/>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-7" date="1628078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove other release-related information</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-8" date="1628164800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove perl-devel from perl</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
</package>
<package pkgid="13961807ad5de05bfa6da02c6dd2ddd3f5efee592875d4706a78ebc4d365a8ec" name="perl-debugsource" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="9.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
</package>
<package pkgid="77eb4bbeb2eaf8a5afb6064255b54957cdaa9cafa84ba522becdf3de2868af69" name="perl-devel" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="10.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-10" date="1701086400">- fix CVE-2023-47038</changelog>
</package>
<package pkgid="e5374e66662764c9f494c0589f51d12e4ec6a1a8d9c2ed00b71f2c3a4990b9cb" name="perl-devel" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="12.oe2203sp1"/>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-10" date="1701086400">- fix CVE-2023-47038</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-11" date="1702036800">- fix CVE-2023-47039</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 4:5.34.0-12" date="1702296000">- Fix CVE-2023-47100</changelog>
</package>
<package pkgid="e0e12aec0be06c457a2bbf48d19998b8f643392b0f14ab0b3902fc105254f625" name="perl-devel" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="7.oe2203sp1"/>
  <changelog author="liudabo&lt;liudabo1@huawei.com&gt; 4:5.32.0-6" date="1626955200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:deleting gdb build dependency</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-7" date="1628078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove other release-related information</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-8" date="1628164800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove perl-devel from perl</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
</package>
<package pkgid="0f5451f078031d691ee69fd14353c1f2f2aadda0dfc225960ffa63a2ebfeaf4e" name="perl-devel" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="8.oe2203sp1"/>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-7" date="1628078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove other release-related information</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-8" date="1628164800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove perl-devel from perl</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
</package>
<package pkgid="5f3dd68dc83a95bd27f8829ff552cce53bdd5b947ae61de7ba380937b7e5cab0" name="perl-devel" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="9.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
</package>
<package pkgid="1e4c0406d91e97f4fa40e58ab786c38bf61e7fc28b4f51169d04df326c3467b0" name="perl-help" arch="noarch">
  <version epoch="4" ver="5.34.0" rel="10.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-10" date="1701086400">- fix CVE-2023-47038</changelog>
</package>
<package pkgid="b2274525d877aaca5aabab9779ac132d5d77384f26191e38bc6b17de4851cfc3" name="perl-help" arch="noarch">
  <version epoch="4" ver="5.34.0" rel="12.oe2203sp1"/>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-10" date="1701086400">- fix CVE-2023-47038</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-11" date="1702036800">- fix CVE-2023-47039</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 4:5.34.0-12" date="1702296000">- Fix CVE-2023-47100</changelog>
</package>
<package pkgid="192fa1e5ed0197840645a9e698617eb3d26385429c4fdb7c941db5d6b2806471" name="perl-help" arch="noarch">
  <version epoch="4" ver="5.34.0" rel="7.oe2203sp1"/>
  <changelog author="liudabo&lt;liudabo1@huawei.com&gt; 4:5.32.0-6" date="1626955200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:deleting gdb build dependency</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-7" date="1628078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove other release-related information</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-8" date="1628164800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove perl-devel from perl</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
</package>
<package pkgid="0f524cd43571c401c553eed618073685b1113e7106c8b103f7b93747defad11f" name="perl-help" arch="noarch">
  <version epoch="4" ver="5.34.0" rel="8.oe2203sp1"/>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-7" date="1628078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove other release-related information</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-8" date="1628164800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove perl-devel from perl</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
</package>
<package pkgid="0caff7d34dc48712d22cf05e4e7647b78b301797cc6a826a47414854e4efc242" name="perl-help" arch="noarch">
  <version epoch="4" ver="5.34.0" rel="9.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
</package>
<package pkgid="740b446500e3003bc07a132b56d8534de50147384e789f77df09b40bc578e207" name="perl-libintl-perl" arch="x86_64">
  <version epoch="0" ver="1.31" rel="3.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.31-2" date="1650974400">- rebuild perl-libintl-perl</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1.31-3" date="1666699200">- Rebuild for next release</changelog>
</package>
<package pkgid="4f1461ec5561b4e67569b821900af43cc02409511fe9444b648aa37a5308cc28" name="perl-libintl-perl-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.31" rel="3.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.31-2" date="1650974400">- rebuild perl-libintl-perl</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1.31-3" date="1666699200">- Rebuild for next release</changelog>
</package>
<package pkgid="f63eb2bc09388b6e6c55f7551c32b3fa2ce0026fceb77e68ebca17c9c8b28c5c" name="perl-libintl-perl-debugsource" arch="x86_64">
  <version epoch="0" ver="1.31" rel="3.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.31-2" date="1650974400">- rebuild perl-libintl-perl</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1.31-3" date="1666699200">- Rebuild for next release</changelog>
</package>
<package pkgid="9c1252beaea1d3c000616a21fc92c7f89289d361c28e2953a1f83b29c85bcb7f" name="perl-libintl-perl-help" arch="noarch">
  <version epoch="0" ver="1.31" rel="3.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.31-2" date="1650974400">- rebuild perl-libintl-perl</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1.31-3" date="1666699200">- Rebuild for next release</changelog>
</package>
<package pkgid="e7545bfea6d00741dcf09664d6c4772eb1ead1c8bad7164c4a488450c5dacbe9" name="perl-libs" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="10.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-10" date="1701086400">- fix CVE-2023-47038</changelog>
</package>
<package pkgid="01c3e09bf49bbf3f95598edb3ecac24c2aed7cda72b7136055bb746494207300" name="perl-libs" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="12.oe2203sp1"/>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-10" date="1701086400">- fix CVE-2023-47038</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-11" date="1702036800">- fix CVE-2023-47039</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 4:5.34.0-12" date="1702296000">- Fix CVE-2023-47100</changelog>
</package>
<package pkgid="9319f953179bdeb619956d8e8fc3e8373e37581492163fd2bcaf096799e3d6dc" name="perl-libs" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="7.oe2203sp1"/>
  <changelog author="liudabo&lt;liudabo1@huawei.com&gt; 4:5.32.0-6" date="1626955200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:deleting gdb build dependency</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-7" date="1628078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove other release-related information</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-8" date="1628164800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove perl-devel from perl</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
</package>
<package pkgid="ae9599924e54d1df301926f8aaf3d31dd7103dae2444511607b2eceaa7dffa51" name="perl-libs" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="8.oe2203sp1"/>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-7" date="1628078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove other release-related information</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-8" date="1628164800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove perl-devel from perl</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
</package>
<package pkgid="f77ea818a8a7f9ca66888aedce6963019489dfd33aa4f668004653c135d9b392" name="perl-libs" arch="x86_64">
  <version epoch="4" ver="5.34.0" rel="9.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
</package>
<package pkgid="ff939438799ade53089a6facc0dbfa127c3096a34f6da1aa35ae36e1abb9e289" name="perl-solv" arch="x86_64">
  <version epoch="0" ver="0.7.22" rel="2.oe2203sp1"/>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 0.7.20-1" date="1640433600">- update to 0.7.20</changelog>
  <changelog author="zhangjun&lt;zhangjun@kylinos.cn&gt; - 0.7.20-2" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leak when using testsolv to execute cases 
       Fix segfault on conflict resolution when using bindings</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.20-3" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ensure-duplinvolvedmap_all-is-reset.patch</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-1" date="1667908800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update libsolv to 0.7.22-1</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-2" date="1692446400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix requirement error</changelog>
</package>
<package pkgid="b97cbedca3edf0a9ad30f3f60335e21767519eac97c421092089cd83f2d19cdc" name="pesign" arch="x86_64">
  <version epoch="0" ver="115" rel="4.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 0.113-4" date="1622462400">- Completing build dependencies</changelog>
  <changelog author="Shenmei Tu &lt;tushenmei@huawei.com&gt; - 0.113-5" date="1627732800">- remove-superfluous-type-settings.patch</changelog>
  <changelog author="godcansee &lt;liu332084460@foxmail.com&gt; - 0.113-6" date="1665403200">- add feature to support for sm2,sm3</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.113-7" date="1667217600">- fix the algorithm flag for sm2,sm3</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 115-1" date="1667822400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:update to 115</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 115-2" date="1668254400">- fix certificate chain bug</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 115-3" date="1671451200">- Free resources if certification cannot be found.</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 115-4" date="1676376000">- Fix CVE-2022-3560</changelog>
</package>
<package pkgid="b08a8fbf74e334360047584282e00589bc3d2cafe4ab4abb5322abc418d6f375" name="pesign" arch="x86_64">
  <version epoch="0" ver="115" rel="5.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 0.113-4" date="1622462400">- Completing build dependencies</changelog>
  <changelog author="Shenmei Tu &lt;tushenmei@huawei.com&gt; - 0.113-5" date="1627732800">- remove-superfluous-type-settings.patch</changelog>
  <changelog author="godcansee &lt;liu332084460@foxmail.com&gt; - 0.113-6" date="1665403200">- add feature to support for sm2,sm3</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.113-7" date="1667217600">- fix the algorithm flag for sm2,sm3</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 115-1" date="1667822400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:update to 115</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 115-2" date="1668254400">- fix certificate chain bug</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 115-3" date="1671451200">- Free resources if certification cannot be found.</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 115-4" date="1676376000">- Fix CVE-2022-3560</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 115-5" date="1685534400">- Remove unused i option in authvar</changelog>
</package>
<package pkgid="87236125dbe8394d5c2e3fbda5af03e138859e4692e957890b9ec8a1da9e011a" name="pesign-debuginfo" arch="x86_64">
  <version epoch="0" ver="115" rel="4.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 0.113-4" date="1622462400">- Completing build dependencies</changelog>
  <changelog author="Shenmei Tu &lt;tushenmei@huawei.com&gt; - 0.113-5" date="1627732800">- remove-superfluous-type-settings.patch</changelog>
  <changelog author="godcansee &lt;liu332084460@foxmail.com&gt; - 0.113-6" date="1665403200">- add feature to support for sm2,sm3</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.113-7" date="1667217600">- fix the algorithm flag for sm2,sm3</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 115-1" date="1667822400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:update to 115</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 115-2" date="1668254400">- fix certificate chain bug</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 115-3" date="1671451200">- Free resources if certification cannot be found.</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 115-4" date="1676376000">- Fix CVE-2022-3560</changelog>
</package>
<package pkgid="619170b01b962c6da3f3a427c415d7e936ab0463ae3aa8f03df175a908d5f3a9" name="pesign-debuginfo" arch="x86_64">
  <version epoch="0" ver="115" rel="5.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 0.113-4" date="1622462400">- Completing build dependencies</changelog>
  <changelog author="Shenmei Tu &lt;tushenmei@huawei.com&gt; - 0.113-5" date="1627732800">- remove-superfluous-type-settings.patch</changelog>
  <changelog author="godcansee &lt;liu332084460@foxmail.com&gt; - 0.113-6" date="1665403200">- add feature to support for sm2,sm3</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.113-7" date="1667217600">- fix the algorithm flag for sm2,sm3</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 115-1" date="1667822400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:update to 115</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 115-2" date="1668254400">- fix certificate chain bug</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 115-3" date="1671451200">- Free resources if certification cannot be found.</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 115-4" date="1676376000">- Fix CVE-2022-3560</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 115-5" date="1685534400">- Remove unused i option in authvar</changelog>
</package>
<package pkgid="47e86c23929404f4e5764f0987be8146c4a6f985768648fddd47a7e19c8f40f3" name="pesign-debugsource" arch="x86_64">
  <version epoch="0" ver="115" rel="4.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 0.113-4" date="1622462400">- Completing build dependencies</changelog>
  <changelog author="Shenmei Tu &lt;tushenmei@huawei.com&gt; - 0.113-5" date="1627732800">- remove-superfluous-type-settings.patch</changelog>
  <changelog author="godcansee &lt;liu332084460@foxmail.com&gt; - 0.113-6" date="1665403200">- add feature to support for sm2,sm3</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.113-7" date="1667217600">- fix the algorithm flag for sm2,sm3</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 115-1" date="1667822400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:update to 115</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 115-2" date="1668254400">- fix certificate chain bug</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 115-3" date="1671451200">- Free resources if certification cannot be found.</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 115-4" date="1676376000">- Fix CVE-2022-3560</changelog>
</package>
<package pkgid="39c03d456d42a505f12bb15c0caab615429b36726314f1810494eb4e518837ae" name="pesign-debugsource" arch="x86_64">
  <version epoch="0" ver="115" rel="5.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 0.113-4" date="1622462400">- Completing build dependencies</changelog>
  <changelog author="Shenmei Tu &lt;tushenmei@huawei.com&gt; - 0.113-5" date="1627732800">- remove-superfluous-type-settings.patch</changelog>
  <changelog author="godcansee &lt;liu332084460@foxmail.com&gt; - 0.113-6" date="1665403200">- add feature to support for sm2,sm3</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.113-7" date="1667217600">- fix the algorithm flag for sm2,sm3</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 115-1" date="1667822400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:update to 115</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 115-2" date="1668254400">- fix certificate chain bug</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 115-3" date="1671451200">- Free resources if certification cannot be found.</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 115-4" date="1676376000">- Fix CVE-2022-3560</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 115-5" date="1685534400">- Remove unused i option in authvar</changelog>
</package>
<package pkgid="adc6a9ee876a1fb675d47494f3c91ad261316b96053789ce4074eb4d2a9db310" name="pesign-help" arch="x86_64">
  <version epoch="0" ver="115" rel="4.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 0.113-4" date="1622462400">- Completing build dependencies</changelog>
  <changelog author="Shenmei Tu &lt;tushenmei@huawei.com&gt; - 0.113-5" date="1627732800">- remove-superfluous-type-settings.patch</changelog>
  <changelog author="godcansee &lt;liu332084460@foxmail.com&gt; - 0.113-6" date="1665403200">- add feature to support for sm2,sm3</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.113-7" date="1667217600">- fix the algorithm flag for sm2,sm3</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 115-1" date="1667822400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:update to 115</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 115-2" date="1668254400">- fix certificate chain bug</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 115-3" date="1671451200">- Free resources if certification cannot be found.</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 115-4" date="1676376000">- Fix CVE-2022-3560</changelog>
</package>
<package pkgid="8920f9b75a5c909df35a4edb5e3597dedd2fa32e9e84f6083f9e9e542f218213" name="pesign-help" arch="x86_64">
  <version epoch="0" ver="115" rel="5.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 0.113-4" date="1622462400">- Completing build dependencies</changelog>
  <changelog author="Shenmei Tu &lt;tushenmei@huawei.com&gt; - 0.113-5" date="1627732800">- remove-superfluous-type-settings.patch</changelog>
  <changelog author="godcansee &lt;liu332084460@foxmail.com&gt; - 0.113-6" date="1665403200">- add feature to support for sm2,sm3</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.113-7" date="1667217600">- fix the algorithm flag for sm2,sm3</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 115-1" date="1667822400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:update to 115</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 115-2" date="1668254400">- fix certificate chain bug</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 115-3" date="1671451200">- Free resources if certification cannot be found.</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 115-4" date="1676376000">- Fix CVE-2022-3560</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 115-5" date="1685534400">- Remove unused i option in authvar</changelog>
</package>
<package pkgid="6e7a532e164f0d2e36834302bd6c9f3ba2f0bdb55ea20c49164093ca60b540a3" name="php" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="a19200962ea5142e3c86e8fd8a2ad03993bbc4bd91da24d8724f5bbd56757290" name="php" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="93f213045ef1880fe94b5cb7762b97e52a9dcd73ccb5268ffce553c9255cdf86" name="php" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="57386ba287a3a7564b2e5ad052a4c14c5c4c450302d070bae748dbe56a7520bb" name="php" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="9efb5968d86fe30ba0533b82915b817189a0e7ccce85b117b32649f30ef035cf" name="php-bcmath" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="6bf583fef9ab1124b4c48fc939ea9521d61aad9a8bf7d8f56994507c63159de0" name="php-bcmath" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="5d53f42441ceb0dde4eaede5968cbaeabe8eaf45ce3632bf80808004c03ada84" name="php-bcmath" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="2cac6f0cd4ae4aada150712c7c8d5d7d2df8a7036333e5dfc56fa52bdeed8225" name="php-bcmath" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="ab2017a711d193b8a8cae93ef28e362fe0b5721b76221517ca179311270747ea" name="php-cli" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="33dd7cd35884a077225a8744f5d40338fc43773fb655c32a3bbf7e6d04fed9ac" name="php-cli" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="7474595227a8b92a277ce0d2a3097be67d67f6da1b6415cc21f67b08ef6719f2" name="php-cli" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="23473c0bbb5dc45a381bc2a2ff5227718c611b1403982d0ff4deb0495272c476" name="php-cli" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="1322e1d4092bdfa3cf15fe94bff716e3db7b65fdff27492d00f17af77b50b5bc" name="php-common" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="9ff30979c0b8d1e2363fcd8f0375f4d0e29fdf4b8c47080098cb85092e324d4f" name="php-common" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="58a81f1ade46875c8939e5367af6aad44578f992640ce56386fe8d4151f9979b" name="php-common" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="f4e9f17b5cb3a351c1c62366717ce816466aa9c338ae5101b27b20a6bf04e94e" name="php-common" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="92259ef5c14fda427a2f8eb33ef59f8f77e8f557d82bab900261b1d3d2c7165a" name="php-dba" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="a2ec1536a17f9e8282f68b9bc497448f6317b7d331758b90b69461e77b268658" name="php-dba" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="ffef94c1c68e0bffbb36cdbe767ba7a714a96f57669087a7e63182a89a09756a" name="php-dba" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="9478d7b27d11d086971d0c3af42dba581183b5cf159bb2259129acb283c499f6" name="php-dba" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="4ea077ea93717c19da3cabb17dc8176b8109e034306ec53940f38c1442be09fa" name="php-dbg" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="5a4d63bc746b3dd3e120aac254b9185840ff3a932d5d2169cfb8b23a6790d064" name="php-dbg" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="900234d65ee317c065d22269e60dec8590660c7e0eed44b7c89ce00fedba76ed" name="php-dbg" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="3da2ecd2df4e62a8347d3aac5954c02cce5bb374be1f1e0595a3819fe996eb9f" name="php-dbg" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="05ea529210207168d4f18195fd5b6f58575bf1d42aac2313f3073529335140a2" name="php-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="7d667c694327e4f9385dfe81c2478cf717622c422bc0f04cc87803b5abec93e7" name="php-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="bfc25b25c26bcb2ea9ae06ba10c3cb3b0fd849a15eaecc9948531dc604c5bd63" name="php-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="55bf46a5d79d45405a9b197c8b305f1c2d60a9e392ede4886aa49b2ffabd0c0f" name="php-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="b93e1a8d2859d707a59a9ee2856e6f2ab12e03cd4e23508f50816930d0a03786" name="php-debugsource" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="d72b10508d25b3d7fd44aaff8a4522dc13e7983689fe1e06850f04834b226e56" name="php-debugsource" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="21caa702d005f8f51353daa349960ed4a75599dc54985a48bac7216293ba1ca2" name="php-debugsource" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="ed70977d1430d8fea512b6921e9b4f9be3d5983edcd772c663f9e8840359b268" name="php-debugsource" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="4b7bb362204b25be5f66a02946945cca997c6c45b4e6cf4a04ef377965100bd0" name="php-devel" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="199e5a717f6b9ff1f67cf744950a28612eb557b240eb355847d22b85dc522e1c" name="php-devel" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="c2961d33f5908863b625e2b43f8faf26714230653d1568d96c6daab04bef1247" name="php-devel" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="382046f0f1c460e743633d8ef667ad6fadd89d99638e50cf112e59d8dd18534c" name="php-devel" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="1d6a59f631b410f956f10191449c1bed157ce6e107d8235ac858a849d3ff7152" name="php-embedded" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="4317db825a4d8173cee83cd002e6852ab33a8e94d24edfca77cd0e68d398e862" name="php-embedded" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="5e66d86e007e958be5d88d6f30117420f623c60068c0e25f0ef8e10061df1301" name="php-embedded" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="f533a03f61e2ffedb5cd829415bcf193f059249c38cb766c15b8c3dce4668375" name="php-embedded" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="ea0aa80908a4110f90e80446197b66d2e4fd9976bf258329ce2e6badf5d18666" name="php-enchant" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="f2e17102949b5d3e561069196f92b83814c07bf2de341aca60e56dd029c9c878" name="php-enchant" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="6717d433684a2385e1de89cc73840db7d162a241bbf65f51ed706f8461ba6c4e" name="php-enchant" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="f88281bb3aef0a2a49088f34e657571f49a4b1b7654b8c4814953647d089674d" name="php-enchant" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="669763ed5a2ef66768a951d8cd3770c9e9650a254dce579a57d98a9a942ab2ae" name="php-ffi" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="1126ce556bc3918d0151b3d03674387d2cf3cb697c34cb666f10c89c4d361892" name="php-ffi" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="93dcb7e207b2a82116b270f92196135af083e75ca18ea9a6b9576ad66502a414" name="php-ffi" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="b9ab719dd1c2336e8cdb4ddfe8f26f08adf7244618023239f98565e184fa0b2b" name="php-ffi" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="0e2e3425c9c1cb30f746439d1c5777ebc0cd044051198dd5c8d8ebed8f4a100c" name="php-fpm" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="f1db58ec605111b3dd08a1d58d12c9acd7fac50612921baa9176d737acfd1664" name="php-fpm" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="117b57c71663c6b18a7e0fdce114d3a17faa1d1411f3c8831c62072a962ae7ff" name="php-fpm" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="c446b0e5927cdbfb26e94cb8f076f62a0102cfa1d5029eab2f05b56027d46847" name="php-fpm" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="b2d0115fab9c959bdb2ce0f83d9d627432f174c15fba0ae422ed04ed547df6b2" name="php-gd" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="64df4276660d3803bc1d180bd738ecaa53adbc946cdc68739c88e922f0b1b7b8" name="php-gd" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="bda4c4ee20b6bb2370a239d622aa3fcc4092019bf3c917081d8bee4fa989b81f" name="php-gd" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="453f0b048c23140ef61eec793f1c38ce8334f68b5efbd26ea63148d52f666133" name="php-gd" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="01fa94b051503ba1e90523c6c00fa073d374831c4cf78284b3de90fad838e24d" name="php-gmp" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="2564dcf19df263b452754c66630d7571160d271e8aac9ceb1484b947074a479b" name="php-gmp" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="b9fedfada183d581097edc7dbd125b20748c56a3e95954b95e72929c9dad7a4b" name="php-gmp" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="6b3f6b3c9b9a95ef5f12c3af529eff646c54ec04c67202c1d118f232812690f5" name="php-gmp" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="6d5122dda323e368beeb3de1eb1b1832e85e4ffffa060724bfd32d99d8c1acd3" name="php-help" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="a11dd1dba53e26d5783971cf78ad27dce19393a55d283e13710b41b78bee3fde" name="php-help" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="46c70e35bf48c48519e956b00a799e04c330bc3b0ff201820255d6ffa9f31911" name="php-help" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="c317390d46377d215c33efbee8148eba77ee842ecfbd3a2e0ac36c95f48745ea" name="php-help" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="c26c699e84bab09738920cbe470094a4b8b44dfc3afd490f4b090df359352b70" name="php-intl" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="cda71d5354baefd0d5934e25e3f887d44d04e759d921c31211b899beb0b0553a" name="php-intl" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="ff23fe5b8856aa2dcc63b73d572649a97738230f2592f6cdb8b7770553e5c012" name="php-intl" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="6a49a9c28f5afa1194598321516150edc1c3f9fe06f4eaa1f8c5f66b3e86fbe3" name="php-intl" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="42828b0e151cf4c1f94c43a7acbb17f3e3a83fbd03a2c13ffd81078f50602e7e" name="php-ldap" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="3f310bc6e65b2f5735a42f411844f1922cda8a079ed09e8c185ed1d9de2a285f" name="php-ldap" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="d7697fc3f3f509670becebbcee7486d5e53a8653455a1517bf910484a4997807" name="php-ldap" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="860363bd2aef0d8c20391f601ddb05dff7d19d59c7e686e248645c5f39d0a4fa" name="php-ldap" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="5dd9f4027f6aeccff673a3f310ea39af3deee2e3206bb0095b1063a4ac5a1c27" name="php-mbstring" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="8a0034ddbf61908a70d63cd1502f6c6d6ca5338e72cbf264e1b5c194e6c204bc" name="php-mbstring" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="392e709569152f6c9dfd5604c75519abdd7176f1278e6ecbf4a07fff47428747" name="php-mbstring" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="63f4f69d76cf5c5d55c22ba40961aec0f1f71b14eba0694c0edfb9362bebb29b" name="php-mbstring" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="d077f20cb5228a5ed3c5dc86969705ee15a2494fe599ead3c26ff9dd12f5ac35" name="php-mysqlnd" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="fde65faef924641650a5e317824173feabc01942dbbccb858601983a4c5d9ac5" name="php-mysqlnd" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="44a38957486f49a6a422cce093b56003d08002131ed4a3649fae630f550bd45c" name="php-mysqlnd" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="a8df52f8931f65e5e4d16ea14d637f42a4c822b7a00fa6b97a36c69d6cc7ec2c" name="php-mysqlnd" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="03eb1ca13e32c1bf20b3820611456ff72626e30ca28acf5f03fe4c828d5e3945" name="php-odbc" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="84b261a25b827ea83c5bbd5988235b47fb2ca08a27e0a5f6969cca11ac136ea5" name="php-odbc" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="02fc6eb8973bf811a26c69cde89e7562e5fd9c70bda946afe08fad1f1ab8a693" name="php-odbc" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="b55716a50d12f1a6c98b288e4383d0f3046700e5ebeea10724cc02b6048e49b9" name="php-odbc" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="58a4e47429fb2a562be9b7c403d1205d4b30ba4b25f1eff42b25b15ddf58f40f" name="php-opcache" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="36cac1a0688baf4c7d44f5a1b7fbd5c814f6f24091b5aa07ecd91726f52242da" name="php-opcache" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="f6bc7d2f9e8a0fc92875312dc39b4d177b1e23b3b4de4663b67390c9e614f6f8" name="php-opcache" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="85b3ef99a415d16dc1777ab76696015c7edb2188d9a5ac00aa2f7e8c60880f8e" name="php-opcache" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="6a44c1b692b479def14d621270c269d5bbf7da6ac01ffc34e2a68945846e1627" name="php-pdo" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="ea7c0125c9436e6211e80398dc0c2c8b43ef0e275026bac8a554d9b6ff8b06c4" name="php-pdo" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="fe5908579b59f3dbf46bfbb32f49d78d7cc4485872f689ac4c5130b9bbcdcbac" name="php-pdo" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="6d92b0bf8d6f99f6e8eed5f7bbcfb78e17e733edcf979159b790391690f3db93" name="php-pdo" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="fe19f7585e3c38b46d924f73ec589d5af9d7b5b0795c2bfec2709e8b4e97b238" name="php-pgsql" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="3ee7629a8f178d2e5a27f632fdc3bb19e904793fd76d107df8ab1db4a140ecfc" name="php-pgsql" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="2810c8ac8dd033f31209f1140fc327be098d4af3cf6ce40ea48b682b14c06410" name="php-pgsql" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="9ca3e65d95c03eab28b64b29635f3a587913eb60fb7038ff1440e71d2078a4c9" name="php-pgsql" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="bea9a5a188f6a898a9cf53156c1f59254fc3c58a5cefeef05c7eb851d025d93b" name="php-process" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="593a6216311b29202e8a99c0411e48daa3c9c0075aaf0fd30667b5893a987938" name="php-process" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="d649a995e6ae292fca7d0b83d628d2cb374bf829610a75527c83e93ae318b9b0" name="php-process" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="c3775b9685a9497337274b2bf9907eeb4165a10efd97093cce5d2d91b230a81b" name="php-process" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="7eebf42251128a16f357c90e35d3ddbd304b8c1efc68be7843257b8ca4ec3f38" name="php-snmp" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="4661ee43ec48f4fbde53f89c53475e1b32fd0237fafd5a0d6de1e8cbc88d6ea1" name="php-snmp" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="2a81afdd2edde2ddec9b9c358e68494eb15fa71b272fd935cb0fd2c8c39a3a53" name="php-snmp" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="6b519d8026185e27d029e1f102ea4a3ccd51e5df3d74498617e9074aaa3e33d1" name="php-snmp" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="29e0686050f4b8c40f36915cc592ad1f1069b91e33e7fcf9f6245cb925e05384" name="php-soap" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="3d6c5de61cc194ba9d05b0b20648e0cde4a0cef3a76afdc4ebe6ad5c29cdb3ad" name="php-soap" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="821ab859d32bab08d8683b2aaef9852bac0af8f0880b5ecece90f27f0eb2b89e" name="php-soap" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="c19a6e238c3cb1b082944467b300acb67a6b72a65ca30a8be6ff9498c0bb2823" name="php-soap" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="f90118d2ea7e69d3fa13c8a4511a7d1e922a52d205cfb134e7ec7ce1baf8b691" name="php-sodium" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="f1c910d24fbfdc94e43d009b72391b8b73eec729acbe2518c8f52f812ca05587" name="php-sodium" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="4cc2b0f4b866f3e640036d1ff2e7f4efa7231a461b21a34c2761b5ecf9f0b0a9" name="php-sodium" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="56b0869ab2e4eedda2f979dfb3032e8ab452b3393f4702fec6ffc0b432c0a834" name="php-sodium" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="9e7859cfd01d01b1ad3117bc313baa2540138e992a066a0429995da4af362c5f" name="php-tidy" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="a88ad6cb09444b7646fbf25128b3bac4edd5d9d7b01ef166194cdaedf7c83ba3" name="php-tidy" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="0a698162c905f4d1188fbfe861c202d612cb55ce7794ead111a34d7e61f1fe23" name="php-tidy" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="42266236e6f40b1c5389135ffb53bac53a78b43615b1208e0100b96ac4562cb5" name="php-tidy" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="f054b433bae0bca24509d0d76cf34947b3d26c9661396acc3115ff1276f7704c" name="php-xml" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="12c606c4280784cf07b1b6cfa4fcd07dbff1738978834950092924933fbd1915" name="php-xml" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="c13557129736ee943715d733280939bcd7ac4388c1018d50a3cc8601da43dc5b" name="php-xml" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="5840c0e9f0dd8e1df0b62cec5d238d007f719d404ecb53b97a7cbc808155a359" name="php-xml" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="0cd9f61384de7cf6e31ac41260ff06dda30121d04f1a3bc80b32ad9907c5a2d2" name="pin-gcc-client" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="5.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 0.1.0-2" date="1661601600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC:Static link plg_grpc_proto</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.2.0-1" date="1664452800">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.2.0</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.3.0-1" date="1669896000">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.3.0</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 0.3.0-2" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-gcc-client</changelog>
  <changelog author="zhaowenyu &lt;804544223@qq.com&gt; - 0.4.0-1" date="1671537600">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.4.0</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.1-1" date="1677412800">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.4.1</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.1-2" date="1677844800">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix STRIP &amp; RPATH</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.1-3" date="1678104000">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix RPATH problem by ld.so.conf.d</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.1-4" date="1678190400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-gcc-client</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.1-5" date="1679054400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Fix VectorType CallOp TreeTOValue</changelog>
</package>
<package pkgid="5351314893602da4cacab574e092a2fdf3170d084f00ab18393f02e4512987f9" name="pin-gcc-client" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="6.oe2203sp1"/>
</package>
<package pkgid="ac1d33d3cd0a65fbc461cb11b330fc20cc5e4519464129cd577fd76a5d06aeba" name="pin-gcc-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="5.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 0.1.0-2" date="1661601600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC:Static link plg_grpc_proto</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.2.0-1" date="1664452800">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.2.0</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.3.0-1" date="1669896000">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.3.0</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 0.3.0-2" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-gcc-client</changelog>
  <changelog author="zhaowenyu &lt;804544223@qq.com&gt; - 0.4.0-1" date="1671537600">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.4.0</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.1-1" date="1677412800">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.4.1</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.1-2" date="1677844800">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix STRIP &amp; RPATH</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.1-3" date="1678104000">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix RPATH problem by ld.so.conf.d</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.1-4" date="1678190400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-gcc-client</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.1-5" date="1679054400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Fix VectorType CallOp TreeTOValue</changelog>
</package>
<package pkgid="66667d7696ed7eefd4c6f649a19ff4a44745d420467915a2964610d575fdb03d" name="pin-gcc-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="6.oe2203sp1"/>
</package>
<package pkgid="a1ee988aa548741cf38b31279530ced50e6f562b20e12b15b15a265132aeb8bb" name="pin-gcc-client-debugsource" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="5.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 0.1.0-2" date="1661601600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC:Static link plg_grpc_proto</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.2.0-1" date="1664452800">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.2.0</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.3.0-1" date="1669896000">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.3.0</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 0.3.0-2" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-gcc-client</changelog>
  <changelog author="zhaowenyu &lt;804544223@qq.com&gt; - 0.4.0-1" date="1671537600">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.4.0</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.1-1" date="1677412800">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.4.1</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.1-2" date="1677844800">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix STRIP &amp; RPATH</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.1-3" date="1678104000">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix RPATH problem by ld.so.conf.d</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.1-4" date="1678190400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-gcc-client</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.1-5" date="1679054400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Fix VectorType CallOp TreeTOValue</changelog>
</package>
<package pkgid="0a5e71666442220717ecd34dea77e368e395c2c46272f0f208ae539804108dd8" name="pin-gcc-client-debugsource" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="6.oe2203sp1"/>
</package>
<package pkgid="59357add2cc824aa9606f57daa64ba77ba8abf128056c9e02a2c751994ac6da9" name="pin-server" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="8.oe2203sp1"/>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.3.0-1" date="1669896000">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.3.0</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 0.3.0-2" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="zhaowenyu &lt;804544223@qq.com&gt; - 0.4.0-1" date="1671537600">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.4.0</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-2" date="1677067200">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-3" date="1677412800">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.0-4" date="1677844800">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix STRIP &amp; RPATH</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.0-5" date="1678104000">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix RPATH problem by ld.so.conf.d</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-6" date="1678190400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-7" date="1679054400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Fix VectorType and Fix Pass DoOptimize method</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-8" date="1679400000">- Type:Update
- ID:NA
- SUG:NA
- DESC:Fix log output form</changelog>
</package>
<package pkgid="29e97a01b466c66c4227a88f706e53e67435a67c8d697acf312123fc958878d6" name="pin-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="8.oe2203sp1"/>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.3.0-1" date="1669896000">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.3.0</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 0.3.0-2" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="zhaowenyu &lt;804544223@qq.com&gt; - 0.4.0-1" date="1671537600">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.4.0</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-2" date="1677067200">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-3" date="1677412800">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.0-4" date="1677844800">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix STRIP &amp; RPATH</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.0-5" date="1678104000">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix RPATH problem by ld.so.conf.d</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-6" date="1678190400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-7" date="1679054400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Fix VectorType and Fix Pass DoOptimize method</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-8" date="1679400000">- Type:Update
- ID:NA
- SUG:NA
- DESC:Fix log output form</changelog>
</package>
<package pkgid="89ea3ff38f6a2162cf3db6acaf3eca1bed6d6f3d62099aeccf55996f369eb0e4" name="pin-server-debugsource" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="8.oe2203sp1"/>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.3.0-1" date="1669896000">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.3.0</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 0.3.0-2" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="zhaowenyu &lt;804544223@qq.com&gt; - 0.4.0-1" date="1671537600">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.4.0</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-2" date="1677067200">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-3" date="1677412800">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.0-4" date="1677844800">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix STRIP &amp; RPATH</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.0-5" date="1678104000">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix RPATH problem by ld.so.conf.d</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-6" date="1678190400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-7" date="1679054400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Fix VectorType and Fix Pass DoOptimize method</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-8" date="1679400000">- Type:Update
- ID:NA
- SUG:NA
- DESC:Fix log output form</changelog>
</package>
<package pkgid="1c9c4c708c0c46cab847dbe38c4dcbee8dd8d02d586496964bed653680b4cc23" name="pin-server-demo" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="8.oe2203sp1"/>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.3.0-1" date="1669896000">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.3.0</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 0.3.0-2" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="zhaowenyu &lt;804544223@qq.com&gt; - 0.4.0-1" date="1671537600">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.4.0</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-2" date="1677067200">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-3" date="1677412800">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.0-4" date="1677844800">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix STRIP &amp; RPATH</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.0-5" date="1678104000">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix RPATH problem by ld.so.conf.d</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-6" date="1678190400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-7" date="1679054400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Fix VectorType and Fix Pass DoOptimize method</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-8" date="1679400000">- Type:Update
- ID:NA
- SUG:NA
- DESC:Fix log output form</changelog>
</package>
<package pkgid="44633ea250aba0ce9b9e458ceee9bb8beb3484c2d96df7f1276a1f125127fc3f" name="pkgconf" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="3.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@huawei.com&gt; - 1.8.0-1" date="1640433600">- Type: NA
- ID: NA
- SUG: NA
- DESC:upgrade version to 1.8.0</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 1.8.0-2" date="1651752000">- Type: NA
- ID: NA
- SUG: NA
- DESC:fix changelog error</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.8.0-3" date="1674993600">- fix CVE-2023-24056</changelog>
</package>
<package pkgid="f062db7c6ec2d99ba7d23ef34e1494a3b27afdcc56a8add4970941746fcaca81" name="pkgconf-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="3.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@huawei.com&gt; - 1.8.0-1" date="1640433600">- Type: NA
- ID: NA
- SUG: NA
- DESC:upgrade version to 1.8.0</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 1.8.0-2" date="1651752000">- Type: NA
- ID: NA
- SUG: NA
- DESC:fix changelog error</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.8.0-3" date="1674993600">- fix CVE-2023-24056</changelog>
</package>
<package pkgid="c5949a7418dd63ca1d4ceff455d2b5fa79753eb3335ec4a96ec8eb2b69f671e0" name="pkgconf-debugsource" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="3.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@huawei.com&gt; - 1.8.0-1" date="1640433600">- Type: NA
- ID: NA
- SUG: NA
- DESC:upgrade version to 1.8.0</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 1.8.0-2" date="1651752000">- Type: NA
- ID: NA
- SUG: NA
- DESC:fix changelog error</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.8.0-3" date="1674993600">- fix CVE-2023-24056</changelog>
</package>
<package pkgid="1994dd4437591ef4cf36b4d8de1fa37c360ae2829d789f4ad961e147bebc02dd" name="pkgconf-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="3.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@huawei.com&gt; - 1.8.0-1" date="1640433600">- Type: NA
- ID: NA
- SUG: NA
- DESC:upgrade version to 1.8.0</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 1.8.0-2" date="1651752000">- Type: NA
- ID: NA
- SUG: NA
- DESC:fix changelog error</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.8.0-3" date="1674993600">- fix CVE-2023-24056</changelog>
</package>
<package pkgid="d0ef63088962e6a10e3d6fcc1bba5abbf93452261a3a2fa3005aa7355793b056" name="pkgconf-help" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="3.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@huawei.com&gt; - 1.8.0-1" date="1640433600">- Type: NA
- ID: NA
- SUG: NA
- DESC:upgrade version to 1.8.0</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 1.8.0-2" date="1651752000">- Type: NA
- ID: NA
- SUG: NA
- DESC:fix changelog error</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.8.0-3" date="1674993600">- fix CVE-2023-24056</changelog>
</package>
<package pkgid="6ae19f42a902dde4bb0cfb30bafa61e50d2150a939b4d9674d2d4bf8b400dc74" name="pmix" arch="x86_64">
  <version epoch="0" ver="4.2.6" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 3.1.4-3" date="1631966400">- Correct the help information</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 4.1.2-1" date="1652961600">- Update to 4.1.2</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.6-1" date="1695038400">- Update to 4.2.6 for fix CVE-2023-41915</changelog>
</package>
<package pkgid="14f46c6020e5c39178bd2eeb489c78ae22d8845672413cace7d20561cec061ad" name="pmix-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2.6" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 3.1.4-3" date="1631966400">- Correct the help information</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 4.1.2-1" date="1652961600">- Update to 4.1.2</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.6-1" date="1695038400">- Update to 4.2.6 for fix CVE-2023-41915</changelog>
</package>
<package pkgid="cad0514517f8dfc5c9c922b920059a2650e88e38df6617486c49e8cae86972ed" name="pmix-debugsource" arch="x86_64">
  <version epoch="0" ver="4.2.6" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 3.1.4-3" date="1631966400">- Correct the help information</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 4.1.2-1" date="1652961600">- Update to 4.1.2</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.6-1" date="1695038400">- Update to 4.2.6 for fix CVE-2023-41915</changelog>
</package>
<package pkgid="33f7b6266b3ddae4a3d6acbd35de41c5f3887cac6e5c79d80784c9b3313cb985" name="pmix-devel" arch="x86_64">
  <version epoch="0" ver="4.2.6" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 3.1.4-3" date="1631966400">- Correct the help information</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 4.1.2-1" date="1652961600">- Update to 4.1.2</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.6-1" date="1695038400">- Update to 4.2.6 for fix CVE-2023-41915</changelog>
</package>
<package pkgid="69ee6b1a6d64661cf04de1c57e2ec6e806f392a122f0d2bf4ec26cc892219279" name="pmix-tools" arch="x86_64">
  <version epoch="0" ver="4.2.6" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 3.1.4-3" date="1631966400">- Correct the help information</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 4.1.2-1" date="1652961600">- Update to 4.1.2</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.6-1" date="1695038400">- Update to 4.2.6 for fix CVE-2023-41915</changelog>
</package>
<package pkgid="5ad5db44488758aae5fca27f2ed0ffc43f0094dc2000d9ee8177f1b526a91e8f" name="poppler" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="4.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 0.67.0-8" date="1627646400">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-37337</changelog>
</package>
<package pkgid="9003af6f75fc7cc953121c26c21831fdda6ee53a752833a4d0d18b151cd4e921" name="poppler" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="6.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
</package>
<package pkgid="a27ea2e33a234a5fe1cc7664b7977eea28874b8f9a650ce0637016d4bdc2d8aa" name="poppler-cpp" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="4.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 0.67.0-8" date="1627646400">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-37337</changelog>
</package>
<package pkgid="7693fafbe65aa714fedab7735de293ffd21cef09d1251849f5db99d1c58f95e1" name="poppler-cpp" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="6.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
</package>
<package pkgid="ca11c0ae1856658e68cc32f496e5b12f75448713c8834605d4ec0cf8fbf0bb9d" name="poppler-cpp-devel" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="4.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 0.67.0-8" date="1627646400">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-37337</changelog>
</package>
<package pkgid="b48a7166508804a7196ed793a1a2e720b0a0056effddb1991d20cec8dee73cfd" name="poppler-cpp-devel" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="6.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
</package>
<package pkgid="d0e9ba76aa64c1bb6c20a7154d2c719378683b1ebc4bf41256bfdaa6a9f6dcdb" name="poppler-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="4.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 0.67.0-8" date="1627646400">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-37337</changelog>
</package>
<package pkgid="2f651a97a2151253bf9bffed6c9c7b8450d8d2cd317c4971ead86cf56b8d72a5" name="poppler-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="6.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
</package>
<package pkgid="18db3f56a5d04b9947b24f4e4b03504138b6d078aa02fd3690c5f35fc42801df" name="poppler-debugsource" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="4.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 0.67.0-8" date="1627646400">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-37337</changelog>
</package>
<package pkgid="97542430081a30b094babbf7619b948fceaad2199761fc36e4d7e79671b87bd3" name="poppler-debugsource" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="6.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
</package>
<package pkgid="5d16761ad120be7f368069c757a73358ca55980c755e06fa073a3138113b0af3" name="poppler-devel" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="4.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 0.67.0-8" date="1627646400">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-37337</changelog>
</package>
<package pkgid="32865706661899e8f15bb3d11c378048f2497c8ef05120138df9fb24b939e52b" name="poppler-devel" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="6.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
</package>
<package pkgid="c6b30f876939b3c5426ed21990cfa093892de0b41db97b415a0edd4147d6236a" name="poppler-glib" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="4.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 0.67.0-8" date="1627646400">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-37337</changelog>
</package>
<package pkgid="d607edb402842459e9c10545a25cefc34753984404f77102bce09d45eb6fb37b" name="poppler-glib" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="6.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
</package>
<package pkgid="ec417b397e142dac94dda0e2716a180418df3ba3be397d59f83c4b6a10f01111" name="poppler-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="4.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 0.67.0-8" date="1627646400">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-37337</changelog>
</package>
<package pkgid="394c81a7d5ac1ebb2436cab19613ac878687519d200259397f95739da5fce73d" name="poppler-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="6.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
</package>
<package pkgid="4ec479e24ef5cde52b403358c1e2257132594de238dd0fff81f3b7fc69b434d4" name="poppler-glib-doc" arch="noarch">
  <version epoch="0" ver="0.90.0" rel="4.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 0.67.0-8" date="1627646400">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-37337</changelog>
</package>
<package pkgid="4dfd4bf51fe93a7d5f11f6054d5ee9a2c432f8808cabc663b55ab240aaa7a753" name="poppler-glib-doc" arch="noarch">
  <version epoch="0" ver="0.90.0" rel="6.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
</package>
<package pkgid="95ed1fb34e88d7cfd5093817552769fc61709f4972ca7f8eb556cba99d41fc5b" name="poppler-help" arch="noarch">
  <version epoch="0" ver="0.90.0" rel="4.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 0.67.0-8" date="1627646400">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-37337</changelog>
</package>
<package pkgid="7d47ec1b385932fc34e8a102dad666f88720dd9fd6b0f27b7cd7b45471f7fb57" name="poppler-help" arch="noarch">
  <version epoch="0" ver="0.90.0" rel="6.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
</package>
<package pkgid="cc8767d6700248ef6c82b08feb18c25f65cca08e61dd70c198af693cf71ef632" name="poppler-qt5" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="4.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 0.67.0-8" date="1627646400">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-37337</changelog>
</package>
<package pkgid="74a300693bb3e3bc91ea91fa45694bdcd622328d458eecb4623dfd48ca90393f" name="poppler-qt5" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="6.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
</package>
<package pkgid="a69e6a5f7515f119ed5c5460f90e38847241c69df0bc05a719735683504ea218" name="poppler-qt5-devel" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="4.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 0.67.0-8" date="1627646400">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-37337</changelog>
</package>
<package pkgid="8a43b9b9469b8f53bc02597f1f72e5984475314c1e6fd037c5c6eba8abea87b5" name="poppler-qt5-devel" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="6.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
</package>
<package pkgid="3a8474f8efbfc6856101ffbe0d7890fa71532566f27d25415b6d73b1700dacf5" name="poppler-utils" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="4.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 0.67.0-8" date="1627646400">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-37337</changelog>
</package>
<package pkgid="6c40e42998cf4cf5d73dbee284ad4aa99b295d04f1070cc1ba2da231320a4854" name="poppler-utils" arch="x86_64">
  <version epoch="0" ver="0.90.0" rel="6.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
</package>
<package pkgid="14e9be1c4bc53a7c87cecd519c246e2eb5e935eca442a5fac8fbf54931e67cd3" name="postfix" arch="x86_64">
  <version epoch="2" ver="3.3.1" rel="20.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-13" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with gcc 10</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-14" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with glibc 2.34</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-15" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of files</changelog>
  <changelog author="xihaochen&lt;xihaochen@h-partner.com&gt; - 2:3.3.1-16" date="1645617600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove libdb dependency</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 2:3.3.1-17" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add build require of lmdb</changelog>
  <changelog author="zhujunhao&lt;zhujunhao11@huawei.com&gt; - 2:3.3.1-18" date="1646136001">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set lmdb db in main.cf</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-19" date="1646308800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set default_data_tpye to lmdb</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-20" date="1678449600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:modify Certificate validity period</changelog>
</package>
<package pkgid="80e96273f960650d81c7e7f668e3919586e5b4c303488d635ef4d48b40e54742" name="postfix-debuginfo" arch="x86_64">
  <version epoch="2" ver="3.3.1" rel="20.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-13" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with gcc 10</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-14" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with glibc 2.34</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-15" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of files</changelog>
  <changelog author="xihaochen&lt;xihaochen@h-partner.com&gt; - 2:3.3.1-16" date="1645617600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove libdb dependency</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 2:3.3.1-17" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add build require of lmdb</changelog>
  <changelog author="zhujunhao&lt;zhujunhao11@huawei.com&gt; - 2:3.3.1-18" date="1646136001">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set lmdb db in main.cf</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-19" date="1646308800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set default_data_tpye to lmdb</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-20" date="1678449600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:modify Certificate validity period</changelog>
</package>
<package pkgid="9d38fe9eaefd8b70fdcfd8e15911d960e0b0ff9a609d6c5bb62de87f71b90aa7" name="postfix-debugsource" arch="x86_64">
  <version epoch="2" ver="3.3.1" rel="20.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-13" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with gcc 10</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-14" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with glibc 2.34</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-15" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of files</changelog>
  <changelog author="xihaochen&lt;xihaochen@h-partner.com&gt; - 2:3.3.1-16" date="1645617600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove libdb dependency</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 2:3.3.1-17" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add build require of lmdb</changelog>
  <changelog author="zhujunhao&lt;zhujunhao11@huawei.com&gt; - 2:3.3.1-18" date="1646136001">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set lmdb db in main.cf</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-19" date="1646308800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set default_data_tpye to lmdb</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-20" date="1678449600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:modify Certificate validity period</changelog>
</package>
<package pkgid="d61a38cfb2d3e97d3ac34c841994f07fdcf31f34bed55080b664ffc0bc4a0791" name="postfix-help" arch="noarch">
  <version epoch="2" ver="3.3.1" rel="20.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-13" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with gcc 10</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-14" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with glibc 2.34</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-15" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of files</changelog>
  <changelog author="xihaochen&lt;xihaochen@h-partner.com&gt; - 2:3.3.1-16" date="1645617600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove libdb dependency</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 2:3.3.1-17" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add build require of lmdb</changelog>
  <changelog author="zhujunhao&lt;zhujunhao11@huawei.com&gt; - 2:3.3.1-18" date="1646136001">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set lmdb db in main.cf</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-19" date="1646308800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set default_data_tpye to lmdb</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-20" date="1678449600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:modify Certificate validity period</changelog>
</package>
<package pkgid="5cb9eaa4f5e8abdb69a143d90987e8c04e78e8f316cf954ccacb0c3005cb53f5" name="postfix-perl-scripts" arch="x86_64">
  <version epoch="2" ver="3.3.1" rel="20.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-13" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with gcc 10</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-14" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with glibc 2.34</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-15" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of files</changelog>
  <changelog author="xihaochen&lt;xihaochen@h-partner.com&gt; - 2:3.3.1-16" date="1645617600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove libdb dependency</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 2:3.3.1-17" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add build require of lmdb</changelog>
  <changelog author="zhujunhao&lt;zhujunhao11@huawei.com&gt; - 2:3.3.1-18" date="1646136001">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set lmdb db in main.cf</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-19" date="1646308800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set default_data_tpye to lmdb</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-20" date="1678449600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:modify Certificate validity period</changelog>
</package>
<package pkgid="c30137fd89a22cc47109a3bb6a4ce6bb0fed2e076e96b98aa25723ff717aa2ae" name="postfix-pgsql" arch="x86_64">
  <version epoch="2" ver="3.3.1" rel="20.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-13" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with gcc 10</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-14" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with glibc 2.34</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-15" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of files</changelog>
  <changelog author="xihaochen&lt;xihaochen@h-partner.com&gt; - 2:3.3.1-16" date="1645617600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove libdb dependency</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 2:3.3.1-17" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add build require of lmdb</changelog>
  <changelog author="zhujunhao&lt;zhujunhao11@huawei.com&gt; - 2:3.3.1-18" date="1646136001">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set lmdb db in main.cf</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-19" date="1646308800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set default_data_tpye to lmdb</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-20" date="1678449600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:modify Certificate validity period</changelog>
</package>
<package pkgid="89940fca0c3cb1016ce2c0c83878f4307862c63425dbb631b1274010297d95e0" name="postfix-sysvinit" arch="noarch">
  <version epoch="2" ver="3.3.1" rel="20.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-13" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with gcc 10</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-14" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with glibc 2.34</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-15" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of files</changelog>
  <changelog author="xihaochen&lt;xihaochen@h-partner.com&gt; - 2:3.3.1-16" date="1645617600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove libdb dependency</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 2:3.3.1-17" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add build require of lmdb</changelog>
  <changelog author="zhujunhao&lt;zhujunhao11@huawei.com&gt; - 2:3.3.1-18" date="1646136001">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set lmdb db in main.cf</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-19" date="1646308800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set default_data_tpye to lmdb</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-20" date="1678449600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:modify Certificate validity period</changelog>
</package>
<package pkgid="a7982348e79cfa9db7c43aa9701adea765410acfc0f779a09f5813a8993eebce" name="postgresql" arch="x86_64">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="d0bb538ac46fcb372e747a838407b2597cdab3961138f8ec3ea21a0771eb86c0" name="postgresql-contrib" arch="x86_64">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="dbdbe9d126dfd39411956bdd4cc204e24f7b77692759b6a8fe69f09be6b20f58" name="postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="c1ac4a84e02430584413354cbfeadc12ebdb82836cc66ce9cca5d094b2ab2bf2" name="postgresql-debugsource" arch="x86_64">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="c0c7b8fb4b2729adb2566c0f7c80cab266940a3eeb6a480ec1dec153607e73df" name="postgresql-docs" arch="x86_64">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="36ef650457ea0e114c800d877dbe53a738f4bff69181a1f2e5f48cffd0ebf3bd" name="postgresql-jdbc" arch="noarch">
  <version epoch="0" ver="42.4.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 42.2.25-1" date="1645012800">- Upgrade to 42.2.25
- Fix CVE-2022-21724</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 42.4.1-1" date="1660046400">- Update to 42.4.1 to fix CVE-2022-31197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 42.4.1-2" date="1686916800">- Fix CVE-2022-41946</changelog>
</package>
<package pkgid="36ef351e108778fb7c2ef98b2f9ddd88eb30727423102394615d8388bac262a9" name="postgresql-jdbc" arch="noarch">
  <version epoch="0" ver="42.4.1" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 42.4.1-1" date="1660046400">- Update to 42.4.1 to fix CVE-2022-31197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 42.4.1-2" date="1686916800">- Fix CVE-2022-41946</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 42.4.1-3" date="1708948800">- Fix CVE-2024-1597</changelog>
</package>
<package pkgid="30f0c999f310a2553c80553a2d4f2711437a947d78cafd3541ac278f3e1d0792" name="postgresql-jdbc-help" arch="noarch">
  <version epoch="0" ver="42.4.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 42.2.25-1" date="1645012800">- Upgrade to 42.2.25
- Fix CVE-2022-21724</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 42.4.1-1" date="1660046400">- Update to 42.4.1 to fix CVE-2022-31197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 42.4.1-2" date="1686916800">- Fix CVE-2022-41946</changelog>
</package>
<package pkgid="915a09f861525c655bb84c00f6b6fe4fcb05d4ef1f5c7203624b2ba8f16e655a" name="postgresql-jdbc-help" arch="noarch">
  <version epoch="0" ver="42.4.1" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 42.4.1-1" date="1660046400">- Update to 42.4.1 to fix CVE-2022-31197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 42.4.1-2" date="1686916800">- Fix CVE-2022-41946</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 42.4.1-3" date="1708948800">- Fix CVE-2024-1597</changelog>
</package>
<package pkgid="f00184e6cd245eff4158ffc975609290f651856f239652c2698ab468f0ae7f13" name="postgresql-jdbc-javadoc" arch="noarch">
  <version epoch="0" ver="42.4.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 42.2.25-1" date="1645012800">- Upgrade to 42.2.25
- Fix CVE-2022-21724</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 42.4.1-1" date="1660046400">- Update to 42.4.1 to fix CVE-2022-31197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 42.4.1-2" date="1686916800">- Fix CVE-2022-41946</changelog>
</package>
<package pkgid="9d61bfaf0588fce311fa7971017085c8c98eff9c3b15e387c5eb2c4055eeddca" name="postgresql-jdbc-javadoc" arch="noarch">
  <version epoch="0" ver="42.4.1" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 42.4.1-1" date="1660046400">- Update to 42.4.1 to fix CVE-2022-31197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 42.4.1-2" date="1686916800">- Fix CVE-2022-41946</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 42.4.1-3" date="1708948800">- Fix CVE-2024-1597</changelog>
</package>
<package pkgid="93f9e25f3994d0e59d7e284ef0bac77fbed5534dea70f1b0a8b29c764a48b966" name="postgresql-llvmjit" arch="x86_64">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="648b00f8d70b6b47a98ad3155524c8bee4c59bdcf3860356b13cb4bee340a099" name="postgresql-plperl" arch="x86_64">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="a0f412b4d2e95c9b5b27fd5a991dd623f4459192fe5048c285fd60851a4558fa" name="postgresql-plpython3" arch="x86_64">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="fdb81d2624d8f006542a6c7a70c25cc55c3f78703a6817ee742b9942b147967d" name="postgresql-pltcl" arch="x86_64">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="8a287012dc7a7914418b7d9a39b4dffc1282cd5e4b0a0c34f2eb76e2b0bb8cc1" name="postgresql-private-devel" arch="x86_64">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="5ffb96d1a69d850aeca3b3fec4cc9c65c1fc290263996bbe4b256a882bc6f21f" name="postgresql-private-libs" arch="x86_64">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="2825f6812649b336cdb6dfe5e2097788681eff9c18ad45889b0660782a843f76" name="postgresql-server" arch="x86_64">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="db430cb92d56992e89771e32cdc120bf01fc0cdc0f318129205a4d5f1566afbf" name="postgresql-server-devel" arch="x86_64">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="2d85b8f57b05c18e16a988a583901e778c260e058e2591badba81cb7eaf8c8ac" name="postgresql-static" arch="x86_64">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="5b5e9a695524fea574cf71ccf00def03213b200fc3ad82f0267c7e5b960f6122" name="postgresql-test" arch="x86_64">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="9a560a3f7699718a9c1dcb88022dd75914441f1fd11c320c5876792049a5bdb8" name="postgresql-test-rpm-macros" arch="noarch">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="2d2583fcd5e45c41e6ee615ca5141b3a065b3f82c30b370e65ec033a20b3980b" name="ppp" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.9-1" date="1638878400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update ppp version from 2.4.8 to 2.4.9</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.9-2" date="1666180800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pppd: Negotiate IP address when only peer addresses are provided</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.9-3" date="1672315200">- Type:cves
- ID:NA
- SUG:NA
- DESC:fix CVE-2022-4603</changelog>
</package>
<package pkgid="366ac360385550e4edae79d0b8764886ade88dadf32971089f09b2fdb629a0a6" name="ppp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.9-1" date="1638878400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update ppp version from 2.4.8 to 2.4.9</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.9-2" date="1666180800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pppd: Negotiate IP address when only peer addresses are provided</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.9-3" date="1672315200">- Type:cves
- ID:NA
- SUG:NA
- DESC:fix CVE-2022-4603</changelog>
</package>
<package pkgid="ec259c6c787186aeef7e2f8bc36ca6d69a6a4a81feb20e8870b44134adf90676" name="ppp-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.9-1" date="1638878400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update ppp version from 2.4.8 to 2.4.9</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.9-2" date="1666180800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pppd: Negotiate IP address when only peer addresses are provided</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.9-3" date="1672315200">- Type:cves
- ID:NA
- SUG:NA
- DESC:fix CVE-2022-4603</changelog>
</package>
<package pkgid="007c54b3cb50e67e28a4531bcd8392b10e0a0ee815b1ec58ff77529aa0db7370" name="ppp-devel" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.9-1" date="1638878400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update ppp version from 2.4.8 to 2.4.9</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.9-2" date="1666180800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pppd: Negotiate IP address when only peer addresses are provided</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.9-3" date="1672315200">- Type:cves
- ID:NA
- SUG:NA
- DESC:fix CVE-2022-4603</changelog>
</package>
<package pkgid="90c669e346a19421988e2195c8e6fd86917a36a5e7560da7169a7485941070ae" name="ppp-help" arch="noarch">
  <version epoch="0" ver="2.4.9" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.9-1" date="1638878400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update ppp version from 2.4.8 to 2.4.9</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.9-2" date="1666180800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pppd: Negotiate IP address when only peer addresses are provided</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.9-3" date="1672315200">- Type:cves
- ID:NA
- SUG:NA
- DESC:fix CVE-2022-4603</changelog>
</package>
<package pkgid="d0f4b9258923a586725378c66ee70702c3036f3adb8c1dacf7b7bd2ac4f29f26" name="procps-ng" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="10.oe2203sp1"/>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 4.0.2-1" date="1675252800">- Update to 4.0.2.</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-3" date="1685448000">- ps: fix ps -lm dump problem</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-4" date="1686657600">- top: first time display delay</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="Xi Fnegfei &lt;xi.fengfei@h3c.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
</package>
<package pkgid="1d6f49f9b46c70de438a91f6cba50973e037134b2f053fb05a12b941d5f43d37" name="procps-ng" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="11.oe2203sp1"/>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-3" date="1685448000">- ps: fix ps -lm dump problem</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-4" date="1686657600">- top: first time display delay</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="Xi Fnegfei &lt;xi.fengfei@h3c.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; - 4.0.2-11" date="1711713600">- backport patch to Correct BSD c option issue</changelog>
</package>
<package pkgid="faab38670e2d7963380be1c026d581fb1f436273a7a0bedb4dbcb500ab59c176" name="procps-ng" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="2.oe2203sp1"/>
  <changelog author="hewenliang &lt;hewenliang4@huawei.com&gt; - 3.3.16-16" date="1625054400">- sync patches</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 3.3.17-1" date="1640606400">- update to 3.3.17</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.3.17-2" date="1643457600">- fix file type chamges caused by top -b redirection</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 3.3.17-3" date="1666699200">- update the release to 3</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-1" date="1667476800">- update the release to 4.0.0-1</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-2" date="1667822400">- top eliminate a potential abend when exiting A mode</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-3" date="1669723200">- enable make check</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.0-4" date="1670846400">- skill: Restore the -p flag functionality</changelog>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 4.0.2-1" date="1675252800">- Update to 4.0.2.</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
</package>
<package pkgid="ddee3baecf8a9659a01c679060e0f94a2458d180f17620dab80df3d6b378228d" name="procps-ng-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="10.oe2203sp1"/>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 4.0.2-1" date="1675252800">- Update to 4.0.2.</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-3" date="1685448000">- ps: fix ps -lm dump problem</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-4" date="1686657600">- top: first time display delay</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="Xi Fnegfei &lt;xi.fengfei@h3c.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
</package>
<package pkgid="d5e09e94b20ca5de15769f752dcb76355aeffc272cb8c3b0e6561311e227e423" name="procps-ng-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="11.oe2203sp1"/>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-3" date="1685448000">- ps: fix ps -lm dump problem</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-4" date="1686657600">- top: first time display delay</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="Xi Fnegfei &lt;xi.fengfei@h3c.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; - 4.0.2-11" date="1711713600">- backport patch to Correct BSD c option issue</changelog>
</package>
<package pkgid="b82db74b9b9ac579d2aebaca9a853532c68bfa8086717ab1c336530bf3a1ebd0" name="procps-ng-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="2.oe2203sp1"/>
  <changelog author="hewenliang &lt;hewenliang4@huawei.com&gt; - 3.3.16-16" date="1625054400">- sync patches</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 3.3.17-1" date="1640606400">- update to 3.3.17</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.3.17-2" date="1643457600">- fix file type chamges caused by top -b redirection</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 3.3.17-3" date="1666699200">- update the release to 3</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-1" date="1667476800">- update the release to 4.0.0-1</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-2" date="1667822400">- top eliminate a potential abend when exiting A mode</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-3" date="1669723200">- enable make check</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.0-4" date="1670846400">- skill: Restore the -p flag functionality</changelog>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 4.0.2-1" date="1675252800">- Update to 4.0.2.</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
</package>
<package pkgid="ba7f7b59044a8938afd4f8c67d1ed5a64634ed1ef7ac8c63b6081f0a7f8ad81c" name="procps-ng-debugsource" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="10.oe2203sp1"/>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 4.0.2-1" date="1675252800">- Update to 4.0.2.</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-3" date="1685448000">- ps: fix ps -lm dump problem</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-4" date="1686657600">- top: first time display delay</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="Xi Fnegfei &lt;xi.fengfei@h3c.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
</package>
<package pkgid="42c2205e5e5eedb0c4b782bcf0ad97528040eff87d8b6356741b6f449842c5bf" name="procps-ng-debugsource" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="11.oe2203sp1"/>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-3" date="1685448000">- ps: fix ps -lm dump problem</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-4" date="1686657600">- top: first time display delay</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="Xi Fnegfei &lt;xi.fengfei@h3c.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; - 4.0.2-11" date="1711713600">- backport patch to Correct BSD c option issue</changelog>
</package>
<package pkgid="b56af4b4c4b82d1e8465479937514dd0c896239cbb48d8765a027a009b8db03d" name="procps-ng-debugsource" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="2.oe2203sp1"/>
  <changelog author="hewenliang &lt;hewenliang4@huawei.com&gt; - 3.3.16-16" date="1625054400">- sync patches</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 3.3.17-1" date="1640606400">- update to 3.3.17</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.3.17-2" date="1643457600">- fix file type chamges caused by top -b redirection</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 3.3.17-3" date="1666699200">- update the release to 3</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-1" date="1667476800">- update the release to 4.0.0-1</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-2" date="1667822400">- top eliminate a potential abend when exiting A mode</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-3" date="1669723200">- enable make check</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.0-4" date="1670846400">- skill: Restore the -p flag functionality</changelog>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 4.0.2-1" date="1675252800">- Update to 4.0.2.</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
</package>
<package pkgid="2be06f052cb3d18be566386c6fe8d3db54fd2a45ba08cc1d6166d8c94dc572e6" name="procps-ng-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="10.oe2203sp1"/>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 4.0.2-1" date="1675252800">- Update to 4.0.2.</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-3" date="1685448000">- ps: fix ps -lm dump problem</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-4" date="1686657600">- top: first time display delay</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="Xi Fnegfei &lt;xi.fengfei@h3c.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
</package>
<package pkgid="30418309d33c2339efdd47cc0b3f8c4b6bb8114ec9eb02c43b433f688fbcbdeb" name="procps-ng-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="11.oe2203sp1"/>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-3" date="1685448000">- ps: fix ps -lm dump problem</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-4" date="1686657600">- top: first time display delay</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="Xi Fnegfei &lt;xi.fengfei@h3c.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; - 4.0.2-11" date="1711713600">- backport patch to Correct BSD c option issue</changelog>
</package>
<package pkgid="0bd9cdbbad492da1f291cc64b38b7e8a629218d8e5a14afad776f966a9cbb454" name="procps-ng-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="2.oe2203sp1"/>
  <changelog author="hewenliang &lt;hewenliang4@huawei.com&gt; - 3.3.16-16" date="1625054400">- sync patches</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 3.3.17-1" date="1640606400">- update to 3.3.17</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.3.17-2" date="1643457600">- fix file type chamges caused by top -b redirection</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 3.3.17-3" date="1666699200">- update the release to 3</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-1" date="1667476800">- update the release to 4.0.0-1</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-2" date="1667822400">- top eliminate a potential abend when exiting A mode</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-3" date="1669723200">- enable make check</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.0-4" date="1670846400">- skill: Restore the -p flag functionality</changelog>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 4.0.2-1" date="1675252800">- Update to 4.0.2.</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
</package>
<package pkgid="5dca64ab4e3749f267b7c0487d431b289d44f3a7c25bc2e948a17298f5b4085b" name="procps-ng-help" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="10.oe2203sp1"/>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 4.0.2-1" date="1675252800">- Update to 4.0.2.</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-3" date="1685448000">- ps: fix ps -lm dump problem</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-4" date="1686657600">- top: first time display delay</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="Xi Fnegfei &lt;xi.fengfei@h3c.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
</package>
<package pkgid="188ac94ab8b0d086d6250bb3eefe6e60b685d2fde123edac20c0c2b2fd64d163" name="procps-ng-help" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="11.oe2203sp1"/>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-3" date="1685448000">- ps: fix ps -lm dump problem</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-4" date="1686657600">- top: first time display delay</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="Xi Fnegfei &lt;xi.fengfei@h3c.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; - 4.0.2-11" date="1711713600">- backport patch to Correct BSD c option issue</changelog>
</package>
<package pkgid="0d6759edf6fa5df16394cd2bd9a4b62c98a904cf92503abde8c9d83ab63be9b9" name="procps-ng-help" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="2.oe2203sp1"/>
  <changelog author="hewenliang &lt;hewenliang4@huawei.com&gt; - 3.3.16-16" date="1625054400">- sync patches</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 3.3.17-1" date="1640606400">- update to 3.3.17</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.3.17-2" date="1643457600">- fix file type chamges caused by top -b redirection</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 3.3.17-3" date="1666699200">- update the release to 3</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-1" date="1667476800">- update the release to 4.0.0-1</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-2" date="1667822400">- top eliminate a potential abend when exiting A mode</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-3" date="1669723200">- enable make check</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.0-4" date="1670846400">- skill: Restore the -p flag functionality</changelog>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 4.0.2-1" date="1675252800">- Update to 4.0.2.</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
</package>
<package pkgid="0642e40093f0e0dd75d5038b52970de061eb09f96a452b6000ac9be720fd9f75" name="procps-ng-i18n" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="10.oe2203sp1"/>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 4.0.2-1" date="1675252800">- Update to 4.0.2.</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-3" date="1685448000">- ps: fix ps -lm dump problem</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-4" date="1686657600">- top: first time display delay</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="Xi Fnegfei &lt;xi.fengfei@h3c.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
</package>
<package pkgid="80d948b5085b6458614763121ef40787eb85785e98373491104c10c9fb93b9bd" name="procps-ng-i18n" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="11.oe2203sp1"/>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-3" date="1685448000">- ps: fix ps -lm dump problem</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-4" date="1686657600">- top: first time display delay</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="Xi Fnegfei &lt;xi.fengfei@h3c.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; - 4.0.2-11" date="1711713600">- backport patch to Correct BSD c option issue</changelog>
</package>
<package pkgid="0f11a17d13a2da907c0ef79ca7d1a2aa56628707aca2d037b4518986ae9299bf" name="procps-ng-i18n" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="2.oe2203sp1"/>
  <changelog author="hewenliang &lt;hewenliang4@huawei.com&gt; - 3.3.16-16" date="1625054400">- sync patches</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 3.3.17-1" date="1640606400">- update to 3.3.17</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.3.17-2" date="1643457600">- fix file type chamges caused by top -b redirection</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 3.3.17-3" date="1666699200">- update the release to 3</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-1" date="1667476800">- update the release to 4.0.0-1</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-2" date="1667822400">- top eliminate a potential abend when exiting A mode</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-3" date="1669723200">- enable make check</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.0-4" date="1670846400">- skill: Restore the -p flag functionality</changelog>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 4.0.2-1" date="1675252800">- Update to 4.0.2.</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
</package>
<package pkgid="7f843ac7d151ff28d8e2b01077403762678d2cdadc31d5bc69c49c0c3ef54d24" name="proftpd" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="2.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
</package>
<package pkgid="3b458a0843f6a90f8af42fa30f9717d5c737e5ff279aa8bc9c3edff25862d567" name="proftpd" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
</package>
<package pkgid="ede7409bcf7a63eca62076b319ea40a7553dd6658608b6dc623e6340c8be9d87" name="proftpd" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.3.8b-4" date="1705060800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add Restart in proftpd.service</changelog>
</package>
<package pkgid="cf7ac244f9a93f0e48cafefa88403435928a4e6e4177a10882dc95ac4f970bc9" name="proftpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="2.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
</package>
<package pkgid="6cb29bc46fff48b9dc4573ca69122abf49c1a2b4ceb67066e19f6a68e92b60cd" name="proftpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
</package>
<package pkgid="9424ee926ca53fb240be7c09d1a72194141b7758d0595bd547d6171bc33dfe76" name="proftpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.3.8b-4" date="1705060800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add Restart in proftpd.service</changelog>
</package>
<package pkgid="fcaa4f7374e57d142e69a13db33948ee8e0eaebe51a40003c2681982bdf81cf4" name="proftpd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="2.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
</package>
<package pkgid="a25e42cf2b163aae59a8a234a4a773729924575a9699241cb665c75c3df5379e" name="proftpd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
</package>
<package pkgid="e4a2cf2f76566f32fae89a638650c14c0fcfdae2cef10881ba1a07c7bbafab0f" name="proftpd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.3.8b-4" date="1705060800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add Restart in proftpd.service</changelog>
</package>
<package pkgid="05e838a0a662b49d3c10edfe41afe1b3cb157b868ca11ebcc48f2fb260578e69" name="proftpd-devel" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="2.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
</package>
<package pkgid="840ebd71f4417e11d4c71f69ed95724af02a1a8c6d56189b1220e75e48ef0f39" name="proftpd-devel" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
</package>
<package pkgid="2f5c6f00a0cd316ca60df8d2c124dfab07e7c0f0ef1e649b4ce6ad8a921412c5" name="proftpd-devel" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.3.8b-4" date="1705060800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add Restart in proftpd.service</changelog>
</package>
<package pkgid="d0e84d7c4f9c0b1941e5f5163d2190ea1d7f12b964fba585e34d1966696e1e44" name="proftpd-ldap" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="2.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
</package>
<package pkgid="d94f4f76b20bca4855dd3fc23c5d9b22f565d909fd1495eb9f6c2a40c0c63e1b" name="proftpd-ldap" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
</package>
<package pkgid="fcd1de2a2dab721354f761680ff0b890500223ddccbbf6946b6439872b7d818a" name="proftpd-ldap" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.3.8b-4" date="1705060800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add Restart in proftpd.service</changelog>
</package>
<package pkgid="7b85eba48fa73a4ca7388fdcf529e156cb45dea1f35104108a7da320fce24a7b" name="proftpd-mysql" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="2.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
</package>
<package pkgid="198b0044e43e06e2797163d79859a65493424e23f49b1afc6662d4bd722f019a" name="proftpd-mysql" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
</package>
<package pkgid="f58536c7761b7ac7e77976350026cf105ad204ce4ac03abdc812a1cb493d97e6" name="proftpd-mysql" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.3.8b-4" date="1705060800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add Restart in proftpd.service</changelog>
</package>
<package pkgid="56c95c5aa7b019cd58195fd9bf9badd8a0ff678da60d9d13d1e38e377f96a7bc" name="proftpd-postgresql" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="2.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
</package>
<package pkgid="cc6c2fe0f9cffb41ae0ba6ce52eb348abe63124b4cc53e805186b3f67a2162c2" name="proftpd-postgresql" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
</package>
<package pkgid="79a55d2dffb2458fab784a45caf6478e368a03b3df0dbbca31da38b15bd7b9e5" name="proftpd-postgresql" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.3.8b-4" date="1705060800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add Restart in proftpd.service</changelog>
</package>
<package pkgid="c240340813517886bf6fd0af7077aa5592760944620560d8ca9db4b9446e9670" name="proftpd-sqlite" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="2.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
</package>
<package pkgid="754652fc1fe09fa5ef1cd74535579450a0f5588610794b33b862fce07b16d60b" name="proftpd-sqlite" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
</package>
<package pkgid="2fb1c1a69e408b3591f3c1476981f20b54235cc7135ee4e8fab32b5ab8b83ba0" name="proftpd-sqlite" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.3.8b-4" date="1705060800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add Restart in proftpd.service</changelog>
</package>
<package pkgid="44e708c55c19dbfd88d6359ea1b5902e800bbc9b0d1cd2d2b26919d5514979c3" name="proftpd-utils" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="2.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
</package>
<package pkgid="157290434f6214dbc8a88c7f480e5d48d87641f4f5cddd5b71b3956a97e3ae3b" name="proftpd-utils" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
</package>
<package pkgid="89fcfcb787f1200d56c43a38e07cd43bcd5ee1841479dc634f48582c63133a7c" name="proftpd-utils" arch="x86_64">
  <version epoch="0" ver="1.3.8b" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.3.8b-4" date="1705060800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add Restart in proftpd.service</changelog>
</package>
<package pkgid="2cd7c03f566cec75a4a0c3c28820d814b9a060bbd1fb49a175dcd617cb42bbc7" name="pylint" arch="noarch">
  <version epoch="0" ver="2.12.2" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.12.2-2" date="1704283200">- Fix "similar -d args" not recognized</changelog>
</package>
<package pkgid="8f9efde0a7d89d81bcc3a9ce597913bf8886a27946869aa62d99eb846df778c9" name="python-aiosmtpd-help" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="2.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.4.2-1" date="1665576000">- Upgrade to version 1.4.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.2-2" date="1710331200">- Fix CVE-2024-27305</changelog>
</package>
<package pkgid="c6bae1ec3d8aca1397b43c12bc5cf9faa15655c6e8f46c3d70c55c5e0665a0f3" name="python-aiosmtpd-help" arch="noarch">
  <version epoch="0" ver="1.4.6" rel="1.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.4.2-1" date="1665576000">- Upgrade to version 1.4.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.2-2" date="1710331200">- Fix CVE-2024-27305</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.4.6-1" date="1716984000">- Update to 1.4.6 (bsc#1224467, CVE-2024-34083):
- STARTTLS is now fully enforced if used.</changelog>
</package>
<package pkgid="53c5c0633b70f26f4dee7628c8771c6db67008c3a011fddf448e8efbce51b99f" name="python-astroid-help" arch="noarch">
  <version epoch="0" ver="2.9.3" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; -2.9.3-2" date="1715169600">- Fix wrapt version mismatch</changelog>
</package>
<package pkgid="bc5007ea30c7aa1fdf74fcf88def938abbf615eacdb8febf98613467287b26f6" name="python-certifi-help" arch="noarch">
  <version epoch="0" ver="2023.7.22" rel="1.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 2021.10.8-1" date="1642593600">- Upgrade to version 2021.10.8</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2023.7.22-1" date="1690804800">- Update to 2023.7.22 for fix CVE-2023-37920 and CVE-2022-23491</changelog>
</package>
<package pkgid="c286a74ebf14b190f1e5ec351d39a29f1fa398be2005dd0da1629bf52a983c43" name="python-cryptography-debuginfo" arch="x86_64">
  <version epoch="0" ver="36.0.1" rel="2.oe2203sp1"/>
  <changelog author="zhuofeng&lt;zhuofeng2@huawei.com&gt; - 36.0.1-2" date="1676376000">- Type:CVE
- CVE:CVE-2023-23931
- SUG:NA
- DESC:fix CVE-2023-23931</changelog>
</package>
<package pkgid="ca3ba6a2adb2b4f6b7c101caee80ad2bd01307473465e8b556e98ecc70a220dd" name="python-cryptography-debuginfo" arch="x86_64">
  <version epoch="0" ver="36.0.1" rel="6.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@h-partners.com&gt; -3.3.1-3" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add SM4 symmetric block cipher</changelog>
  <changelog author="tianwei&lt;tianwei12@h-partners.com&gt; -3.3.1-4" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: provide openssl apis related to SM for python</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; 36.0.1-1" date="1667304000">- Update to version 36.0.1</changelog>
  <changelog author="zhuofeng&lt;zhuofeng2@huawei.com&gt; - 36.0.1-2" date="1676376000">- Type:CVE
- CVE:CVE-2023-23931
- SUG:NA
- DESC:fix CVE-2023-23931</changelog>
  <changelog author="jichengke&lt;jichengke2011@gmail.com&gt; - 36.0.1-3" date="1680782400">- fix bogus date in changelog</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 36.0.1-4" date="1691841600">- add loongarch64 support</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 36.0.1-5" date="1701259200">- Fixed crash when loading a PKCS#7 bundle with no certificates</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 36.0.1-6" date="1701518400">- raise an exception instead of returning an empty list for pkcs7 cert loading</changelog>
</package>
<package pkgid="fc93e4b9a7ce1dc0f43c5662a1067458f99744a3743ca6a780958a3aed4f42d6" name="python-cryptography-debugsource" arch="x86_64">
  <version epoch="0" ver="36.0.1" rel="2.oe2203sp1"/>
  <changelog author="zhuofeng&lt;zhuofeng2@huawei.com&gt; - 36.0.1-2" date="1676376000">- Type:CVE
- CVE:CVE-2023-23931
- SUG:NA
- DESC:fix CVE-2023-23931</changelog>
</package>
<package pkgid="308d8c323e0d9152511586ed13bfc1d507049e2c63691d29697bcde3d3707c50" name="python-cryptography-debugsource" arch="x86_64">
  <version epoch="0" ver="36.0.1" rel="6.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@h-partners.com&gt; -3.3.1-3" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add SM4 symmetric block cipher</changelog>
  <changelog author="tianwei&lt;tianwei12@h-partners.com&gt; -3.3.1-4" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: provide openssl apis related to SM for python</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; 36.0.1-1" date="1667304000">- Update to version 36.0.1</changelog>
  <changelog author="zhuofeng&lt;zhuofeng2@huawei.com&gt; - 36.0.1-2" date="1676376000">- Type:CVE
- CVE:CVE-2023-23931
- SUG:NA
- DESC:fix CVE-2023-23931</changelog>
  <changelog author="jichengke&lt;jichengke2011@gmail.com&gt; - 36.0.1-3" date="1680782400">- fix bogus date in changelog</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 36.0.1-4" date="1691841600">- add loongarch64 support</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 36.0.1-5" date="1701259200">- Fixed crash when loading a PKCS#7 bundle with no certificates</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 36.0.1-6" date="1701518400">- raise an exception instead of returning an empty list for pkcs7 cert loading</changelog>
</package>
<package pkgid="ffc0cc1d978e32ad32eb41191c4c5723bb47f090b9558604d40c2f5e33991af9" name="python-cryptography-help" arch="noarch">
  <version epoch="0" ver="36.0.1" rel="2.oe2203sp1"/>
  <changelog author="zhuofeng&lt;zhuofeng2@huawei.com&gt; - 36.0.1-2" date="1676376000">- Type:CVE
- CVE:CVE-2023-23931
- SUG:NA
- DESC:fix CVE-2023-23931</changelog>
</package>
<package pkgid="e86456f5f619edf9b575af7a6d4a263727a2fe581d0ca32defc6e94a5a18bb7e" name="python-cryptography-help" arch="noarch">
  <version epoch="0" ver="36.0.1" rel="6.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@h-partners.com&gt; -3.3.1-3" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add SM4 symmetric block cipher</changelog>
  <changelog author="tianwei&lt;tianwei12@h-partners.com&gt; -3.3.1-4" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: provide openssl apis related to SM for python</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; 36.0.1-1" date="1667304000">- Update to version 36.0.1</changelog>
  <changelog author="zhuofeng&lt;zhuofeng2@huawei.com&gt; - 36.0.1-2" date="1676376000">- Type:CVE
- CVE:CVE-2023-23931
- SUG:NA
- DESC:fix CVE-2023-23931</changelog>
  <changelog author="jichengke&lt;jichengke2011@gmail.com&gt; - 36.0.1-3" date="1680782400">- fix bogus date in changelog</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 36.0.1-4" date="1691841600">- add loongarch64 support</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 36.0.1-5" date="1701259200">- Fixed crash when loading a PKCS#7 bundle with no certificates</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 36.0.1-6" date="1701518400">- raise an exception instead of returning an empty list for pkcs7 cert loading</changelog>
</package>
<package pkgid="e6b6f2a3c5eed7ac89453e9fbb6db5609eb597867ad921cc2ff9ee1036849235" name="python-gevent-debuginfo" arch="x86_64">
  <version epoch="0" ver="21.1.2" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 20.6.1-1" date="1641556800">- Fix compile failed of python-gevent</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 21.1.2-1" date="1666612800">- Update to 21.1.2</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 21.1.2-2" date="1695729600">- Fix CVE-2023-41419</changelog>
</package>
<package pkgid="50c196d72718c33679adf8d4b2f19d009a8aba89f2df0750fb9820bf25a77ed5" name="python-gevent-debugsource" arch="x86_64">
  <version epoch="0" ver="21.1.2" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 20.6.1-1" date="1641556800">- Fix compile failed of python-gevent</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 21.1.2-1" date="1666612800">- Update to 21.1.2</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 21.1.2-2" date="1695729600">- Fix CVE-2023-41419</changelog>
</package>
<package pkgid="953d1e16b1e23591f6377062eaca5d166c62bd386174218f1e9735d84c382e45" name="python-gevent-help" arch="noarch">
  <version epoch="0" ver="21.1.2" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 20.6.1-1" date="1641556800">- Fix compile failed of python-gevent</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 21.1.2-1" date="1666612800">- Update to 21.1.2</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 21.1.2-2" date="1695729600">- Fix CVE-2023-41419</changelog>
</package>
<package pkgid="8dfd94799124258900664620d403972adeded94025a42046600846401813a61a" name="python-jinja2-help" arch="noarch">
  <version epoch="0" ver="3.0.3" rel="3.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.0.3-2" date="1656590400">- enable check test suite</changelog>
  <changelog author="weihaohao &lt;weihaohao2.huawei.com&gt; - 3.0.3-3" date="1705924800">- Type:CVE
- CVE:CVE-2024-22195
- SUG:NA
- DESC:fix CVE-2024-22195</changelog>
</package>
<package pkgid="27753378a9ea9680c5d534c2213f23d3a43a915f0159435f04eaa347bb6efc33" name="python-jinja2-help" arch="noarch">
  <version epoch="0" ver="3.0.3" rel="4.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.0.3-2" date="1656590400">- enable check test suite</changelog>
  <changelog author="weihaohao &lt;weihaohao2@huawei.com&gt; - 3.0.3-3" date="1705924800">- Type:CVE
- CVE:CVE-2024-22195
- SUG:NA
- DESC:fix CVE-2024-22195</changelog>
  <changelog author="weihaohao &lt;weihaohao2@huawei.com&gt; - 3.0.3-4" date="1715342400">- Type:CVE
- CVE:CVE-2024-34064
- SUG:NA
- DESC:fix CVE-2024-34064</changelog>
</package>
<package pkgid="8eca6352bb26864a6e18c3d2399e7d30cb016886cb55330c13d944a61c3f6192" name="python-ldb-devel-common" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="2.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 2.1.4-3" date="1626696000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:cancel gdb in buildrequires</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.1.4-4" date="1631016000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:remove rpath of libldb's binary files</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.1-1" date="1639569600">- Type:update
- ID:NA
- SUG:NA
- DESC:update to 2.4.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.1-2" date="1659355200">- Type:CVE
- ID:CVE-2022-32746
- SUG:NA
- DESC:fix CVE-2022-32746</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.1-1" date="1667563200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update libldb version to 2.6.1</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.1-2" date="1680350400">- Type:CVE
- ID:CVE-2023-0614
- SUG:NA
- DESC:fix CVE-2023-0614</changelog>
</package>
<package pkgid="f4b4c913ee3f33c9bee1e4bacc8653b76319dbdb6998ebd21525dc7ddc8a2631" name="python-ovs-help" arch="noarch">
  <version epoch="0" ver="2.13.3" rel="2.oe2203sp1"/>
  <changelog author="Python_Bot &lt;Python_Bot@openeuler.org&gt;" date="1621512000">- Package Spec generated</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt;" date="1681819200">- Add Conflicts with python3-openvswitch</changelog>
</package>
<package pkgid="8065f90f57decafb1096dc0e090c1b741fefdf573beee1199e4b78915eff8e5a" name="python-paramiko-help" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.8.1-2" date="1645876800">- drop invoke dependencies as it requires ancient pytest</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.8.1-3" date="1648468800">- fix CVE-2022-24302 and the rear patch of CVE-2022-24302</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2.11.0-1" date="1655985600">- Upgrade to version 2.11.0</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.11.0-2" date="1667217600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix error in sftp testcase</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.11.0-3" date="1704974400">- fix CVE-2023-48795</changelog>
</package>
<package pkgid="c65a022f33cac0dac51f950bc755b83b87f7acb4d5f8792cc672cc5e87d951fb" name="python-pillow-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="4.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
</package>
<package pkgid="bd76da68233053cbd24bd0346cae7d0f04c9c79eafc75060b4d3baf4f24c82ee" name="python-pillow-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="5.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
</package>
<package pkgid="372944bf88fabc0b64a4d53d607ca922ed9734d431776928ab1cedb4143932d2" name="python-pillow-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
</package>
<package pkgid="2bcbb575190bb4e51db80d22416964db440b6ca0e7f917521242001720f0e4a3" name="python-pillow-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="7.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-7" date="1712491200">- Fix CVE-2024-28219</changelog>
</package>
<package pkgid="521fd9ae0b5c4014fbc21a3b414186e0d57a244133f5af60c45d620eb00648d4" name="python-pillow-debugsource" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="4.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
</package>
<package pkgid="7759c977f4b8da375ad02b7327376027f77032c37908b0a8db4294939c41bc1b" name="python-pillow-debugsource" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="5.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
</package>
<package pkgid="64aa8cdb1ab28c3ba442d8b198bd70f31c72b7d0b51530ed9962c9122a57fb5f" name="python-pillow-debugsource" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
</package>
<package pkgid="bc7de43b26ec06302de6f0e500b370443af6871949871da4d2ae3d7e57f7aa53" name="python-pillow-debugsource" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="7.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-7" date="1712491200">- Fix CVE-2024-28219</changelog>
</package>
<package pkgid="8ba43abf358a57fa42f2e601043fabd587f4493fd34652e29c27c6eb066e00ec" name="python-pycryptodome-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.19.1" rel="1.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.11.0-2" date="1656676800">- enable check test suite</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.19.1-1" date="1704801600">- Upgrade to version 3.19.1 for fix CVE-2023-52323</changelog>
</package>
<package pkgid="bd8529b6869c8b809329c2fe160b769cc150c30bab99d5f8ca3ae61443452401" name="python-pycryptodome-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.19.1" rel="2.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.11.0-2" date="1656676800">- enable check test suite</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.19.1-1" date="1704801600">- Upgrade to version 3.19.1 for fix CVE-2023-52323</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.19.1-2" date="1708603200">- do not pack test case files</changelog>
</package>
<package pkgid="bea896c0de6885a14be396c3bb3176e17d2a0f29f0d4b2852a0b13de6efb562d" name="python-pycryptodome-debugsource" arch="x86_64">
  <version epoch="0" ver="3.19.1" rel="1.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.11.0-2" date="1656676800">- enable check test suite</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.19.1-1" date="1704801600">- Upgrade to version 3.19.1 for fix CVE-2023-52323</changelog>
</package>
<package pkgid="3ffaa2540552a154da7a15571a6e3cb0c71010afc6bda79672e349d402597785" name="python-pycryptodome-debugsource" arch="x86_64">
  <version epoch="0" ver="3.19.1" rel="2.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.11.0-2" date="1656676800">- enable check test suite</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.19.1-1" date="1704801600">- Upgrade to version 3.19.1 for fix CVE-2023-52323</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.19.1-2" date="1708603200">- do not pack test case files</changelog>
</package>
<package pkgid="fe8f3ef5e0e2237d291ba897b45f90ad8a8d76dcc2a3988bdd04fa7edbfb5bc3" name="python-pycryptodomex-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.19.1" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 3.15.0-1" date="1666180800">- Upgrade to version 3.15.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.19.1-1" date="1704801600">- Upgrade to version 3.19.1 for fix CVE-2023-52323</changelog>
</package>
<package pkgid="dc2e06c6aa5536e364adaf4dfaab9aaef0ff1b73817ad7d15c075dd307f5a4e2" name="python-pycryptodomex-debugsource" arch="x86_64">
  <version epoch="0" ver="3.19.1" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 3.15.0-1" date="1666180800">- Upgrade to version 3.15.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.19.1-1" date="1704801600">- Upgrade to version 3.19.1 for fix CVE-2023-52323</changelog>
</package>
<package pkgid="bbd8c7f5138b11c0dbe142fd050e6096aa059de737dfb95499628cf46f958d07" name="python-pycryptodomex-help" arch="noarch">
  <version epoch="0" ver="3.19.1" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 3.15.0-1" date="1666180800">- Upgrade to version 3.15.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.19.1-1" date="1704801600">- Upgrade to version 3.19.1 for fix CVE-2023-52323</changelog>
</package>
<package pkgid="67eae26a4d7980684a6c89f0eaf68a9df12e64dd946d122c0467f3da160dd180" name="python-pygments-help" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="4.oe2203sp1"/>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 2.8.1-1" date="1628251200">- Update version to 2.8.1</changelog>
  <changelog author="renhongxun &lt;renhongxun@huawei.com&gt; - 2.10.0-1" date="1640001600">- Upgrade version to 2.10.0</changelog>
  <changelog author="caofei &lt;caofei@xfusion.com&gt; -  2.10.0-2" date="1673870400">- fixed typo</changelog>
  <changelog author="caofei &lt;caofei@xfusion.com&gt; -  2.10.0-3" date="1674043200">- Fix "do concurrent" and "go to" keywords in the Fortran</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.10.0-4" date="1690372800">- Type:CVE
- CVE:CVE-2022-40896
- SUG:NA
- DESC:fix CVE-2022-40896</changelog>
</package>
<package pkgid="da569388c15e036a1586d6ea3496fca9a4e977c63a66e19c0162a908e86d4e90" name="python-pymongo-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.11.3" rel="3.oe2203sp1"/>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 3.11.3-2" date="1699444800">- Add missing error message to InvalidBSON error</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 3.11.3-3" date="1712491200">- Fix CVE-2024-21506</changelog>
</package>
<package pkgid="b2168997854920f3c7795f009de3d9710daa1ca314eda0ae2ab50ae930e335df" name="python-pymongo-debugsource" arch="x86_64">
  <version epoch="0" ver="3.11.3" rel="3.oe2203sp1"/>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 3.11.3-2" date="1699444800">- Add missing error message to InvalidBSON error</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 3.11.3-3" date="1712491200">- Fix CVE-2024-21506</changelog>
</package>
<package pkgid="38f132d8c8a4cd5b2b2d6237b07d2a7e818eca6ffafe72ac5def03aebfb5e088" name="python-pymongo-help" arch="noarch">
  <version epoch="0" ver="3.11.3" rel="3.oe2203sp1"/>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 3.11.3-2" date="1699444800">- Add missing error message to InvalidBSON error</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 3.11.3-3" date="1712491200">- Fix CVE-2024-21506</changelog>
</package>
<package pkgid="a0ad810f75fdbb751edce7b996cd85c660014a1de41806ed1783f7bf8e1a66f1" name="python-reportlab-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6.10" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.4.0-13" date="1626868800">- Fix CVE-2019-17626</changelog>
  <changelog author="Chengshaowei &lt;chenshaowei3@huawei.com&gt; - 3.4.0-14" date="1641988800">- Fix can not import error</changelog>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 3.6.10-1" date="1655985600">- Upgrade to version 3.6.10</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 3.6.10-2" date="1687953600">- Fix CVE-2023-33733</changelog>
</package>
<package pkgid="ffa93d741463da1c7b46531a650069ebdd105dc2f76d1bd132bb52deda64cc7c" name="python-reportlab-debugsource" arch="x86_64">
  <version epoch="0" ver="3.6.10" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.4.0-13" date="1626868800">- Fix CVE-2019-17626</changelog>
  <changelog author="Chengshaowei &lt;chenshaowei3@huawei.com&gt; - 3.4.0-14" date="1641988800">- Fix can not import error</changelog>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 3.6.10-1" date="1655985600">- Upgrade to version 3.6.10</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 3.6.10-2" date="1687953600">- Fix CVE-2023-33733</changelog>
</package>
<package pkgid="c4a313bccebef5e1de2164644d9dcfcd4ed9b832f1d0b5be212a1b5e9a779303" name="python-reportlab-help" arch="noarch">
  <version epoch="0" ver="3.6.10" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.4.0-13" date="1626868800">- Fix CVE-2019-17626</changelog>
  <changelog author="Chengshaowei &lt;chenshaowei3@huawei.com&gt; - 3.4.0-14" date="1641988800">- Fix can not import error</changelog>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 3.6.10-1" date="1655985600">- Upgrade to version 3.6.10</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 3.6.10-2" date="1687953600">- Fix CVE-2023-33733</changelog>
</package>
<package pkgid="8750c581a00bba2918c44871482ff5919bc942212bdaff7bec93d17315e608e7" name="python-requests-help" arch="noarch">
  <version epoch="0" ver="2.26.0" rel="8.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.26.0-1" date="1638619200">- update to 2.26.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.26.0-2" date="1639396800">- provide pythonxdist(requests)</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.26.0-3" date="1640174400">- add python-charset-normalizer</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 2.26.0-4" date="1640865600">- Adapt to python 3.9.9</changelog>
  <changelog author="zhujunhao &lt;zhujunhao8@huawei.com&gt; - 2.26.0-5" date="1641902400">- modify build failed</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.26.0-6" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.26.0-7" date="1667649600">- Fix the mailman build error caused by the python-chardet update.</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.26.0-8" date="1685534400">- fix CVE-2023-32681</changelog>
</package>
<package pkgid="afd5cb412be58cae05896636c6f253ee921f0ec665fb61a8f48023e2b7ec43a4" name="python-setuptools" arch="noarch">
  <version epoch="0" ver="59.4.0" rel="5.oe2203sp1"/>
  <changelog author="shixuantong&lt;shixuantong@huawei.com&gt; - 54.2.0-1" date="1617019200">- upgrade version to 54.2.0</changelog>
  <changelog author="renhongxun&lt;renhongxun@huawei.com&gt; - 59.4.0-1" date="1640174400">- upgrade version to 59.4.0</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 59.4.0-2" date="1640779200">- add bootstrap for rebuild python3-3.9.9</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 59.4.0-3" date="1641297600">- Bootstrap for Python 3.9.9</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 59.4.0-4" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 59.4.0-5" date="1672833600">- Type:CVE
- CVE:CVE-2022-40897
- SUG:NA
- DESC:fix CVE-2022-40897</changelog>
</package>
<package pkgid="421a7548136f33c7bee2fcbea058b5ec7b9ad41f501cc0d07a062844d4658fe9" name="python-setuptools-help" arch="noarch">
  <version epoch="0" ver="59.4.0" rel="5.oe2203sp1"/>
  <changelog author="shixuantong&lt;shixuantong@huawei.com&gt; - 54.2.0-1" date="1617019200">- upgrade version to 54.2.0</changelog>
  <changelog author="renhongxun&lt;renhongxun@huawei.com&gt; - 59.4.0-1" date="1640174400">- upgrade version to 59.4.0</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 59.4.0-2" date="1640779200">- add bootstrap for rebuild python3-3.9.9</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 59.4.0-3" date="1641297600">- Bootstrap for Python 3.9.9</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 59.4.0-4" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 59.4.0-5" date="1672833600">- Type:CVE
- CVE:CVE-2022-40897
- SUG:NA
- DESC:fix CVE-2022-40897</changelog>
</package>
<package pkgid="6042f2621a49b4b5261c35a372b330c6a36c35f5a2f2486be656577e24d9c163" name="python-sphinx-help" arch="noarch">
  <version epoch="1" ver="4.4.0" rel="2.oe2203sp1"/>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 3.5.2-1" date="1627387200">- update to 3.5.2</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 4.3.1-1" date="1639396800">- update version to 4.3.1</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 4.3.1-2" date="1641470400">- fix docutils version error</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 4.3.1-3" date="1641988800">- revert openEuler-fix-docutils-version-error.patch</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1:4.4.0-1" date="1666872000">- Upgrade 4.4.0</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:4.4.0-2" date="1689854400">- html: Updated jQuery version from 3.5.1 to 3.6.0</changelog>
</package>
<package pkgid="54e68cb1b92265ec7a446b82ec9800cbcb4238e9df77839d7160e134a417a7ac" name="python-sphinx-locale" arch="noarch">
  <version epoch="1" ver="4.4.0" rel="2.oe2203sp1"/>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 3.5.2-1" date="1627387200">- update to 3.5.2</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 4.3.1-1" date="1639396800">- update version to 4.3.1</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 4.3.1-2" date="1641470400">- fix docutils version error</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 4.3.1-3" date="1641988800">- revert openEuler-fix-docutils-version-error.patch</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1:4.4.0-1" date="1666872000">- Upgrade 4.4.0</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:4.4.0-2" date="1689854400">- html: Updated jQuery version from 3.5.1 to 3.6.0</changelog>
</package>
<package pkgid="a8d75611d6e2002a32cde5d262792cc5cbdeab6cc6506d3b0bb8e4a22a9cf27c" name="python-tornado-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.1" rel="2.oe2203sp1"/>
  <changelog author="yaozc701 &lt;yaozc7@foxmail.com&gt; - 6.1-1" date="1625745600">- Upgrade version to 6.1</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 6.1-2" date="1686916800">- Fix CVE-2023-28370</changelog>
</package>
<package pkgid="9e64924d8278446c33e66273b5ac81a8f3381de8b5a5d3cf82038e41361bfbfc" name="python-tornado-debugsource" arch="x86_64">
  <version epoch="0" ver="6.1" rel="2.oe2203sp1"/>
  <changelog author="yaozc701 &lt;yaozc7@foxmail.com&gt; - 6.1-1" date="1625745600">- Upgrade version to 6.1</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 6.1-2" date="1686916800">- Fix CVE-2023-28370</changelog>
</package>
<package pkgid="7971056a970615709733a49b39e74e8c2779d671bad4a983079a1abcc3d09da9" name="python-tornado-help" arch="x86_64">
  <version epoch="0" ver="6.1" rel="2.oe2203sp1"/>
  <changelog author="yaozc701 &lt;yaozc7@foxmail.com&gt; - 6.1-1" date="1625745600">- Upgrade version to 6.1</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 6.1-2" date="1686916800">- Fix CVE-2023-28370</changelog>
</package>
<package pkgid="571db4027a15e72939366b2719a12a1b869cc43bffd28b64302e8795358099b6" name="python-tqdm-help" arch="noarch">
  <version epoch="0" ver="4.56.0" rel="4.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 4.56.0-3" date="1668427200">- change source path</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.56.0-4" date="1714996800">- Fix CVE-2024-34062</changelog>
</package>
<package pkgid="5fed40087988f32252210b18d226c66ba871fabb06136b528289e08eba5594e6" name="python-uWSGI-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.19.1" rel="5.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.0.19.1-2" date="1622462400">- Completing build dependencies to fix gcc compiler missing error</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; -  2.0.19.1-3" date="1630411200">- DESC: uwsgi add BuildRequires openssl-devel to support --https</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; -  2.0.19.1-4" date="1647691200">- The setup.py install is deprecated, use pip install instead to fix build error</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 2.0.19.1-5" date="1670241600">- Remove rpath</changelog>
</package>
<package pkgid="32670e6e5533fa318ff51f19817cb41d49908d67f1219e7a5f73c8129f4bdb6d" name="python-uWSGI-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.19.1" rel="5.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.0.19.1-2" date="1622462400">- Completing build dependencies to fix gcc compiler missing error</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; -  2.0.19.1-3" date="1630411200">- DESC: uwsgi add BuildRequires openssl-devel to support --https</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; -  2.0.19.1-4" date="1647691200">- The setup.py install is deprecated, use pip install instead to fix build error</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 2.0.19.1-5" date="1670241600">- Remove rpath</changelog>
</package>
<package pkgid="6e2e1196df9bb4dc9fc5b8f78338df2b67a57348b2cf68ccd4b6ef1aa7722f7b" name="python-uWSGI-help" arch="x86_64">
  <version epoch="0" ver="2.0.19.1" rel="5.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.0.19.1-2" date="1622462400">- Completing build dependencies to fix gcc compiler missing error</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; -  2.0.19.1-3" date="1630411200">- DESC: uwsgi add BuildRequires openssl-devel to support --https</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; -  2.0.19.1-4" date="1647691200">- The setup.py install is deprecated, use pip install instead to fix build error</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 2.0.19.1-5" date="1670241600">- Remove rpath</changelog>
</package>
<package pkgid="9a74442cb2bbc349b58e99f5b446df8b67ce4cb1e4d8e6e8a8ed606620bc665d" name="python-werkzeug-help" arch="noarch">
  <version epoch="0" ver="2.0.3" rel="4.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 1.2.1-2" date="1640088000">- fix test failures due to unhandled exceptions being thrown without being propagated to caller</changelog>
  <changelog author="Ge Wang &lt;wange20@h-partners.com&gt; - 2.0.3-1" date="1666699200">- Upgrade to version 2.0.3</changelog>
  <changelog author="Bolehu &lt;heyaohua@xfusion.com&gt; - 2.0.3-2" date="1673092800">- fix typo and grammar mistake</changelog>
  <changelog author="Bolehu &lt;heyaohua@xfusion.com&gt; - 2.0.3-3" date="1673265600">- fix flake8-bugbear finding</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.3-4" date="1692014400">- Fix CVE-2023-23934 and CVE-2023-25577</changelog>
</package>
<package pkgid="7493dbb27f5fd14e7a4a3ee5606990da1f13f576b8980f6337f75481819e9112" name="python-wheel-wheel" arch="noarch">
  <version epoch="1" ver="0.37.0" rel="6.oe2203sp1"/>
  <changelog author="shixuantong&lt;shixuantong@huawei.com&gt; - 0.37.0-1" date="1640088000">- update version to 0.37.0</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 0.37.0-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 1:0.37.0-3" date="1697112000">- Fixed wheel pack duplicating WHEEL contents on build number</changelog>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 1:0.37.0-4" date="1697544000">- Fixed the non-standard format of changelog</changelog>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 1:0.37.0-5" date="1699444800">- Support unpacking wheels that contain files with commas in their names</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.37.0-6" date="1701950400">- Fix CVE-2022-40898</changelog>
</package>
<package pkgid="4819ff9e5621d6ab5d79dba6b5880e1879f55f9c9dfcf0ae864e65c1baa5aad1" name="python3" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="24.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
</package>
<package pkgid="06a8e20dec191452c8f0b344c32aafc840d8f1fa080be7da9c48e1b0a5651388" name="python3" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="25.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
  <changelog author="zhaoyu &lt;zhaoyu64@huawei.com&gt;- 3.9.9-25" date="1691409600">- Type:CVE
- CVE:CVE-2007-4559
- SUG:NA
- DESC:Add a filter parameter to tarfile.extractall will allow users to avoid CVE-2007-4559 by changing their code/settings.</changelog>
</package>
<package pkgid="573df6f16aef2d6ec35b3cb01281d4d690bea9ada353a173bfef60de141221dd" name="python3" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="26.oe2203sp1"/>
</package>
<package pkgid="6d3a69d85f4f587529443606dd7dc776a51addcc565aadbabadc0c358c6e4752" name="python3" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="28.oe2203sp1"/>
</package>
<package pkgid="6f48a613fe33d8b96b4d6cc1b067209613d9302c1780ade5ff14524d138bd04f" name="python3-PyMySQL" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.9.3-4" date="1716552000">- Fix CVE-2024-36039</changelog>
</package>
<package pkgid="7e9cb4d8afbebcaf168f9f358e4078dae71a22dafaec99933fe054ca1f87bc0c" name="python3-aiosmtpd" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="2.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.4.2-1" date="1665576000">- Upgrade to version 1.4.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.2-2" date="1710331200">- Fix CVE-2024-27305</changelog>
</package>
<package pkgid="f99036e014b0cc4e3a1b287b5c69168736679b82c9711df009c1212e4331fc32" name="python3-aiosmtpd" arch="noarch">
  <version epoch="0" ver="1.4.6" rel="1.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.4.2-1" date="1665576000">- Upgrade to version 1.4.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.2-2" date="1710331200">- Fix CVE-2024-27305</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.4.6-1" date="1716984000">- Update to 1.4.6 (bsc#1224467, CVE-2024-34083):
- STARTTLS is now fully enforced if used.</changelog>
</package>
<package pkgid="95d02f1e8c3d43dc611059fd003faba2cde6eee2a035412924d50c774a973bd5" name="python3-astroid" arch="noarch">
  <version epoch="0" ver="2.9.3" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; -2.9.3-2" date="1715169600">- Fix wrapt version mismatch</changelog>
</package>
<package pkgid="e21e5b883e94760bea133dc01309a4fa5dd34e4fe59a94dffd0bfa30e164263c" name="python3-bind" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="d9ab61cd4719d9876f6211141be608fca74076c76807d526b1fe273ebedc12ce" name="python3-bind" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="02c5f7a27ab416b6334f3bcf53f391441e9bbff9e1b58023b8c6fd64aa96d636" name="python3-bind" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="aa7b09fb9be7ddcb31d4c96c2b5928ab17fec0851174aa2170b7ae113b6d2b75" name="python3-bind" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="45fa2b293f20861d164bc043c5a824f4962cbca85c973394fb370b5bd03ad421" name="python3-blockdev" arch="x86_64">
  <version epoch="0" ver="2.26" rel="4.oe2203sp1"/>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 2.26-2" date="1655294400">- Add BuildRequire make</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 2.26-3" date="1679486400">- remove require dmraid and kmod-kvdo</changelog>
  <changelog author="liyanan &lt;liyana61@h-partners.com&gt; - 2.26-4" date="1704196800">- remove require vdo</changelog>
</package>
<package pkgid="7c8d256e913582e84ce570c3a7d6d95614023c7e13568776757e76a2c3ccf3e9" name="python3-bson" arch="x86_64">
  <version epoch="0" ver="3.11.3" rel="3.oe2203sp1"/>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 3.11.3-2" date="1699444800">- Add missing error message to InvalidBSON error</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 3.11.3-3" date="1712491200">- Fix CVE-2024-21506</changelog>
</package>
<package pkgid="c0304966720ecd73c7b6b403de65c7628e6011ac02205fd0efd677e60dd3ca27" name="python3-ceph-argparse" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="da1c8de3fa7c74703a559272507d1670f8cf6514fc5ebd05ddc4f7a47319b43a" name="python3-ceph-argparse" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="27b1ab072ce61834f756e5bac9f831319f6a4b619797cda2341015e78becb89e" name="python3-ceph-common" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="f99509a33817096d92d2b3fe6b83268fcd82864cdc09a186f963c38239b95a2b" name="python3-ceph-common" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="2841b15c7b8a6d40ffc83c241078e6cb172295bcd881c0b8b9b1ce63a4d688f9" name="python3-cephfs" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="5dd668f06107560a9af150195d6ef4b00d0f3e3a269441c2b768bf958a001cab" name="python3-cephfs" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="b5e1be21db59da8c52a30276bb27a7d62032ec353866d7a331e47ade2b2d946e" name="python3-certifi" arch="noarch">
  <version epoch="0" ver="2023.7.22" rel="1.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 2021.10.8-1" date="1642593600">- Upgrade to version 2021.10.8</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2023.7.22-1" date="1690804800">- Update to 2023.7.22 for fix CVE-2023-37920 and CVE-2022-23491</changelog>
</package>
<package pkgid="31b748460404dffba4070beb613bccb26adacdd369226c650f15d5b17d186c2f" name="python3-cryptography" arch="x86_64">
  <version epoch="0" ver="36.0.1" rel="2.oe2203sp1"/>
  <changelog author="zhuofeng&lt;zhuofeng2@huawei.com&gt; - 36.0.1-2" date="1676376000">- Type:CVE
- CVE:CVE-2023-23931
- SUG:NA
- DESC:fix CVE-2023-23931</changelog>
</package>
<package pkgid="0be1429026edae2bfa1e4adbc06e953569eac13638cde375bcb9701ed6c73d05" name="python3-cryptography" arch="x86_64">
  <version epoch="0" ver="36.0.1" rel="6.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@h-partners.com&gt; -3.3.1-3" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add SM4 symmetric block cipher</changelog>
  <changelog author="tianwei&lt;tianwei12@h-partners.com&gt; -3.3.1-4" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: provide openssl apis related to SM for python</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; 36.0.1-1" date="1667304000">- Update to version 36.0.1</changelog>
  <changelog author="zhuofeng&lt;zhuofeng2@huawei.com&gt; - 36.0.1-2" date="1676376000">- Type:CVE
- CVE:CVE-2023-23931
- SUG:NA
- DESC:fix CVE-2023-23931</changelog>
  <changelog author="jichengke&lt;jichengke2011@gmail.com&gt; - 36.0.1-3" date="1680782400">- fix bogus date in changelog</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 36.0.1-4" date="1691841600">- add loongarch64 support</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 36.0.1-5" date="1701259200">- Fixed crash when loading a PKCS#7 bundle with no certificates</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 36.0.1-6" date="1701518400">- raise an exception instead of returning an empty list for pkcs7 cert loading</changelog>
</package>
<package pkgid="03e36d8b423af1ecbdb0f395940ca6ba32d24ff9acf8a512b13cb0a7f386a567" name="python3-debug" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="24.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
</package>
<package pkgid="12a31eb2830a376a38fffec7399c82d3b23f3163f60ef8af6d874633e9946ad2" name="python3-debug" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="25.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
  <changelog author="zhaoyu &lt;zhaoyu64@huawei.com&gt;- 3.9.9-25" date="1691409600">- Type:CVE
- CVE:CVE-2007-4559
- SUG:NA
- DESC:Add a filter parameter to tarfile.extractall will allow users to avoid CVE-2007-4559 by changing their code/settings.</changelog>
</package>
<package pkgid="307476a529e201c3a4df626fe183fad23fe5b9234dde20e0eb3f40b838e2471c" name="python3-debug" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="26.oe2203sp1"/>
</package>
<package pkgid="652291c4b3296fb6de0bb339f60bc95788719ce0331f14dfbd913cf58657b428" name="python3-debug" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="28.oe2203sp1"/>
</package>
<package pkgid="e5463e054f894593f4e9ea6c5128eab20cc5e0f2ce80c7fc31971e7a3ed5df7f" name="python3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="24.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
</package>
<package pkgid="325868f68247250fd1413c3cfa3647a5301c3f15dc338c4e2a26258cc2376889" name="python3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="25.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
  <changelog author="zhaoyu &lt;zhaoyu64@huawei.com&gt;- 3.9.9-25" date="1691409600">- Type:CVE
- CVE:CVE-2007-4559
- SUG:NA
- DESC:Add a filter parameter to tarfile.extractall will allow users to avoid CVE-2007-4559 by changing their code/settings.</changelog>
</package>
<package pkgid="f695bd4f12d96b8dc9c656eb4f5f5369b672e4bbc3c845186261521dd4da29a7" name="python3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="26.oe2203sp1"/>
</package>
<package pkgid="fbc78a56d9c03c102e0be1c06011ec8daa55e5790fb929ac00bfde241948eb05" name="python3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="28.oe2203sp1"/>
</package>
<package pkgid="57df66718ac438e1c466b016e34a5a2978faea50ca41088fe648f90f7835473c" name="python3-debugsource" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="24.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
</package>
<package pkgid="078fec4df51a66e25244c5a39cb235c1a0280757e288c21352c6abc82d4e4cc5" name="python3-debugsource" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="25.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
  <changelog author="zhaoyu &lt;zhaoyu64@huawei.com&gt;- 3.9.9-25" date="1691409600">- Type:CVE
- CVE:CVE-2007-4559
- SUG:NA
- DESC:Add a filter parameter to tarfile.extractall will allow users to avoid CVE-2007-4559 by changing their code/settings.</changelog>
</package>
<package pkgid="17ba6eef2f0f7bf6cbd642bf6d8ea0e9e0223a917e68a9a9b1a5a9b21700e1c5" name="python3-debugsource" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="26.oe2203sp1"/>
</package>
<package pkgid="8c95e29ec8f89fd579bd194400a619702318f37736a89a33455ffbe5d901694d" name="python3-debugsource" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="28.oe2203sp1"/>
</package>
<package pkgid="bebf5aa4132fd816a3635ce86587ea3bba01e234eedfd6704ef8bb4e22b3df9b" name="python3-devel" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="24.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
</package>
<package pkgid="b1d6e1ada6a7a3e470b2a6a189904506327f74a8ecc4f10ad00bc0098a0f6f8e" name="python3-devel" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="25.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
  <changelog author="zhaoyu &lt;zhaoyu64@huawei.com&gt;- 3.9.9-25" date="1691409600">- Type:CVE
- CVE:CVE-2007-4559
- SUG:NA
- DESC:Add a filter parameter to tarfile.extractall will allow users to avoid CVE-2007-4559 by changing their code/settings.</changelog>
</package>
<package pkgid="77d32c627f2c85c6053e71254fe2766833978663864bf59c97d804fa47ecc40d" name="python3-devel" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="26.oe2203sp1"/>
</package>
<package pkgid="4861cbaacf8573a2a7eb39cb3eeb260b55a832c3056a11ae5c66113a4f3de760" name="python3-devel" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="28.oe2203sp1"/>
</package>
<package pkgid="8bcca9d59908f31a2645b2a65d70261f5a301e33acecafe9c2bd004aa667eaef" name="python3-dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="10.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-1" date="1667476800">- DESC:upgrade dnf version to 4.14.0</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-2" date="1668600000">- DESC:correct the incorrect Obsoletes</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-3" date="1670587200">- DESC:enable DT</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587201">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
</package>
<package pkgid="27c6dcf7d8c55e5034332866e85c138401ae3779c898fced542e4e0f869c81a7" name="python3-dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="13.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587200">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
</package>
<package pkgid="dc6c4b6e66562cb8232464a285aec495fbab87aacff324424f7974363ed22229" name="python3-dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="14.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
</package>
<package pkgid="6bcb1148801d95a91757f20ccdf75853c5a55ece48b20211b1e177b46b69d12b" name="python3-dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="15.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
</package>
<package pkgid="a826e4b8f66f1aa7a403d155ec2a847dea266798f508feb54a0c5d509228c12e" name="python3-dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="18.oe2203sp1"/>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
</package>
<package pkgid="183453184a44d52e01b9e5bc26d361c39c27c33caf6d1f43bb3105065b750472" name="python3-dnf-plugin-leaves" arch="noarch">
  <version epoch="0" ver="4.3.1" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 4.0.17-3" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-1" date="1637668800">- DESC:update to 4.0.24</changelog>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 4.0.24-2" date="1641556800">- DESC:delete buildrequires of python-nose</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-3" date="1642852800">- DESC:Reposync does not stop downloading packages</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 4.0.24-4" date="1653566400">- DESC: Remove redundant BuildRequires</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.0.24-5" date="1661169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add configfile post-transaction-actions.d</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-1" date="1667476800">- DESC:upgrade dnf-plugins-core version to 4.3.1</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-2" date="1669896000">- DESC:modify incorrect contents in spec file</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-3" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value</changelog>
</package>
<package pkgid="bd9a8f91431e2602b95c56bdbbd455195bd293d243dff4fc11b5fe0c8dbe6ebe" name="python3-dnf-plugin-local" arch="noarch">
  <version epoch="0" ver="4.3.1" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 4.0.17-3" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-1" date="1637668800">- DESC:update to 4.0.24</changelog>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 4.0.24-2" date="1641556800">- DESC:delete buildrequires of python-nose</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-3" date="1642852800">- DESC:Reposync does not stop downloading packages</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 4.0.24-4" date="1653566400">- DESC: Remove redundant BuildRequires</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.0.24-5" date="1661169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add configfile post-transaction-actions.d</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-1" date="1667476800">- DESC:upgrade dnf-plugins-core version to 4.3.1</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-2" date="1669896000">- DESC:modify incorrect contents in spec file</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-3" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value</changelog>
</package>
<package pkgid="9f92b16847f3ef3adf712bcce23c350eea154ad47c1adf1529ed62f1301133ad" name="python3-dnf-plugin-modulesync" arch="noarch">
  <version epoch="0" ver="4.3.1" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 4.0.17-3" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-1" date="1637668800">- DESC:update to 4.0.24</changelog>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 4.0.24-2" date="1641556800">- DESC:delete buildrequires of python-nose</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-3" date="1642852800">- DESC:Reposync does not stop downloading packages</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 4.0.24-4" date="1653566400">- DESC: Remove redundant BuildRequires</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.0.24-5" date="1661169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add configfile post-transaction-actions.d</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-1" date="1667476800">- DESC:upgrade dnf-plugins-core version to 4.3.1</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-2" date="1669896000">- DESC:modify incorrect contents in spec file</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-3" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value</changelog>
</package>
<package pkgid="81373c75c9a7ce2000538667191f11089fe038fe836262f887f081dcd4ccddda" name="python3-dnf-plugin-post-transaction-actions" arch="noarch">
  <version epoch="0" ver="4.3.1" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 4.0.17-3" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-1" date="1637668800">- DESC:update to 4.0.24</changelog>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 4.0.24-2" date="1641556800">- DESC:delete buildrequires of python-nose</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-3" date="1642852800">- DESC:Reposync does not stop downloading packages</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 4.0.24-4" date="1653566400">- DESC: Remove redundant BuildRequires</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.0.24-5" date="1661169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add configfile post-transaction-actions.d</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-1" date="1667476800">- DESC:upgrade dnf-plugins-core version to 4.3.1</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-2" date="1669896000">- DESC:modify incorrect contents in spec file</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-3" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value</changelog>
</package>
<package pkgid="9a7199632739358bc082cf31439e77d8ced9151c6e41cb93d94cb0d2c512adf3" name="python3-dnf-plugin-show-leaves" arch="noarch">
  <version epoch="0" ver="4.3.1" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 4.0.17-3" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-1" date="1637668800">- DESC:update to 4.0.24</changelog>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 4.0.24-2" date="1641556800">- DESC:delete buildrequires of python-nose</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-3" date="1642852800">- DESC:Reposync does not stop downloading packages</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 4.0.24-4" date="1653566400">- DESC: Remove redundant BuildRequires</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.0.24-5" date="1661169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add configfile post-transaction-actions.d</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-1" date="1667476800">- DESC:upgrade dnf-plugins-core version to 4.3.1</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-2" date="1669896000">- DESC:modify incorrect contents in spec file</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-3" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value</changelog>
</package>
<package pkgid="2b7fbfca36687ee331e42a314ae99809040d7e496f63cd8d5331c4ff84233805" name="python3-dnf-plugin-versionlock" arch="noarch">
  <version epoch="0" ver="4.3.1" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 4.0.17-3" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-1" date="1637668800">- DESC:update to 4.0.24</changelog>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 4.0.24-2" date="1641556800">- DESC:delete buildrequires of python-nose</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-3" date="1642852800">- DESC:Reposync does not stop downloading packages</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 4.0.24-4" date="1653566400">- DESC: Remove redundant BuildRequires</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.0.24-5" date="1661169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add configfile post-transaction-actions.d</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-1" date="1667476800">- DESC:upgrade dnf-plugins-core version to 4.3.1</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-2" date="1669896000">- DESC:modify incorrect contents in spec file</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-3" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value</changelog>
</package>
<package pkgid="d58c3d523ea422187952cc17959a43dd176e82f1bc248ad85ad554b99cfa46d1" name="python3-dnf-plugins-core" arch="noarch">
  <version epoch="0" ver="4.3.1" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 4.0.17-3" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-1" date="1637668800">- DESC:update to 4.0.24</changelog>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 4.0.24-2" date="1641556800">- DESC:delete buildrequires of python-nose</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-3" date="1642852800">- DESC:Reposync does not stop downloading packages</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 4.0.24-4" date="1653566400">- DESC: Remove redundant BuildRequires</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.0.24-5" date="1661169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add configfile post-transaction-actions.d</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-1" date="1667476800">- DESC:upgrade dnf-plugins-core version to 4.3.1</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-2" date="1669896000">- DESC:modify incorrect contents in spec file</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-3" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value</changelog>
</package>
<package pkgid="334412a75ef7b1fc9bf5d167b3b002be7ae08daa3c02ece93fee0e4629b539c8" name="python3-edk2-devel" arch="noarch">
  <version epoch="0" ver="202011" rel="11.oe2203sp1"/>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-2" date="1644926400">- fix CVE-2021-38576</changelog>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-3" date="1645099200">- OvmfPkg: VirtioNetDxe: Extend the RxBufferSize to avoid data truncation</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 202011-4" date="1651060800">- update the format of changelog</changelog>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
</package>
<package pkgid="2b0c9cf5259a57b223ae408a4b991f47cc0b6c58399cd0f9fdada3544cb59eea" name="python3-edk2-devel" arch="noarch">
  <version epoch="0" ver="202011" rel="12.oe2203sp1"/>
</package>
<package pkgid="dd1070986c53f59d1d94105a0d9dc4b6380f4996facd5788b50842fbf8c803ad" name="python3-edk2-devel" arch="noarch">
  <version epoch="0" ver="202011" rel="14.oe2203sp1"/>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
</package>
<package pkgid="32ad468de99bfcbfbb91ab6016bf09cf8116d5db161db549539db75d6509f620" name="python3-edk2-devel" arch="noarch">
  <version epoch="0" ver="202011" rel="16.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
</package>
<package pkgid="84c58b2c2d85ae6c4f023c41e35f659eb4cd079f8bccf977caf0e01b9d642f24" name="python3-edk2-devel" arch="noarch">
  <version epoch="0" ver="202011" rel="17.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="d1f96ad3428fd6f70e8bf5a2ea2817ef26e7ec0b5fd8fca289717109caed7c41" name="python3-flask" arch="noarch">
  <version epoch="1" ver="2.1.2" rel="4.oe2203sp1"/>
  <changelog author="Jiachen Fan&lt;fanjiachen3@huawei.com&gt; - 1.1.2-2" date="1633003200">- add missing install Requires python3-simplejson</changelog>
  <changelog author="Haiwei Li&lt;lihaiwei8@huawei.com&gt; - 1.1.2-3" date="1635336000">- backport add require pythonx-simplejson. details see issue #I4CGIS</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1:2.1.2-1" date="1666699200">- Upgrade to version 2.1.2</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 1:2.1.2-2" date="1673265600">- Fix linting error.</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 1:2.1.2-3" date="1673611200">- Fix incorrect references to query in testing doc</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.1.2-4" date="1683806400">- Fix CVE-2023-30861</changelog>
</package>
<package pkgid="8939e7f39bc67d921ef1fe1d687745c7ec741d30c4062099747324497747aac8" name="python3-future" arch="noarch">
  <version epoch="0" ver="0.18.2" rel="2.oe2203sp1"/>
  <changelog author="liksh &lt;liks11@chinaunicom.cn&gt; - 0.18.2-1" date="1626264000">- update package from 0.16.0 to 0.18.2</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.18.2-2" date="1678449600">- Fix CVE-2022-40899</changelog>
</package>
<package pkgid="c4382e92cb42ebc79ca664926e0877cc2816a6c6443590dbb70a59272cf1756e" name="python3-gevent" arch="x86_64">
  <version epoch="0" ver="21.1.2" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 20.6.1-1" date="1641556800">- Fix compile failed of python-gevent</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 21.1.2-1" date="1666612800">- Update to 21.1.2</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 21.1.2-2" date="1695729600">- Fix CVE-2023-41419</changelog>
</package>
<package pkgid="152448e223d2ccbc7c5c9ab2c3926be49491d56409be5dc5d8061a68b52b7a89" name="python3-gluster" arch="x86_64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="5035ba5856253b568ad26e2077265379013a88a1f4882a9783e6927f470c1265" name="python3-gluster" arch="x86_64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="b9578395bfec3b266218b30caf1ea6c3fba5781dba151516e12bb9f2ec108b21" name="python3-gpgme" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-2" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the URL of source code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-3" date="1709726400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add gpgme.pc file</changelog>
</package>
<package pkgid="c1242884d6bc94b6a9cb8e98097df65c5c92e7a5928a1f33727fae2b64d364e7" name="python3-grpcio" arch="x86_64">
  <version epoch="0" ver="1.41.1" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.41.1-1" date="1640606400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update grpc to 1.41.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.41.1-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless so files</changelog>
  <changelog author="xingwei&lt;xingwei14@h-partners.com&gt; - 1.41.1-3" date="1650110400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: remove gflags</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-4" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add some secure compilation options</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.41.1-5" date="1684497600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix sw_64 build error for hive</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-6" date="1695124800">- Type:CVE
- ID:CVE-2023-4785
- SUG:NA
- DESC:fix CVE-2023-4785</changelog>
</package>
<package pkgid="1f72891b56c22f98d077e532fdf03dc0130d464dc7080d19aa04d2522ec4e2bd" name="python3-hawkey" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="4.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.48.0-2" date="1623153600">- Type:CVE
- ID:CVE-2021-3445
- SUG:NA
- DESC:fix CVE-2021-3445</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
</package>
<package pkgid="93857b6ed7bbf17258d94bc85d85aee4aed7402988300d9ffe389c6a64ba7c78" name="python3-hawkey" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
</package>
<package pkgid="c8794c52a1bfb5a6055fcc48f30c2f5a81fd1b3d33bd3c51395c1a2bb0ca794f" name="python3-hawkey" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="6.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
</package>
<package pkgid="3b9fa5ee6284684ac7a12cab199579b78cd82383b5d247e5dfdc06cb57288a0e" name="python3-hawkey" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="7.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
</package>
<package pkgid="f923947120adbbe33b425e07f7fe86a2ce1f16dd6bbf8493c7b7d3ffc9e77d24" name="python3-hawkey" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="8.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.69.0-8" date="1705320000">- Modify loongarch64 patch use all arch</changelog>
</package>
<package pkgid="81541299f045ff54fa155a1b0b7e104484cf585cd46936188d37db656854a829" name="python3-help" arch="noarch">
  <version epoch="0" ver="3.9.9" rel="24.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
</package>
<package pkgid="ab55e4f868cd5396f5412875ce84b75b14f439fa0953250b949768852af49f7c" name="python3-help" arch="noarch">
  <version epoch="0" ver="3.9.9" rel="25.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
  <changelog author="zhaoyu &lt;zhaoyu64@huawei.com&gt;- 3.9.9-25" date="1691409600">- Type:CVE
- CVE:CVE-2007-4559
- SUG:NA
- DESC:Add a filter parameter to tarfile.extractall will allow users to avoid CVE-2007-4559 by changing their code/settings.</changelog>
</package>
<package pkgid="d913e1accd51445bd5a7e58476f5f4d3a13f5063f14721d5e28363478ed79da2" name="python3-help" arch="noarch">
  <version epoch="0" ver="3.9.9" rel="26.oe2203sp1"/>
</package>
<package pkgid="e100399ba127fc85358156bec3c05e90374235bf24033f47a0ff7f3d81f856da" name="python3-help" arch="noarch">
  <version epoch="0" ver="3.9.9" rel="28.oe2203sp1"/>
</package>
<package pkgid="c30b94713ba5c37c7e61c0d9b49cab8d6edd01ddf1225baeba861c859b54f0a9" name="python3-idna" arch="noarch">
  <version epoch="0" ver="3.2" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.2-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.2-3" date="1715083200">- fix CVE-2024-3651</changelog>
</package>
<package pkgid="5889829a5f49aff9b725f003f070e26cb691c84bad4fd077f5867dbd06c82538" name="python3-jinja2" arch="noarch">
  <version epoch="0" ver="3.0.3" rel="3.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.0.3-2" date="1656590400">- enable check test suite</changelog>
  <changelog author="weihaohao &lt;weihaohao2.huawei.com&gt; - 3.0.3-3" date="1705924800">- Type:CVE
- CVE:CVE-2024-22195
- SUG:NA
- DESC:fix CVE-2024-22195</changelog>
</package>
<package pkgid="968cc27b03c6c1b64d4bb3bd9bab619298eb45f76ee7fcacfd05e7ce3c5bd028" name="python3-jinja2" arch="noarch">
  <version epoch="0" ver="3.0.3" rel="4.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.0.3-2" date="1656590400">- enable check test suite</changelog>
  <changelog author="weihaohao &lt;weihaohao2@huawei.com&gt; - 3.0.3-3" date="1705924800">- Type:CVE
- CVE:CVE-2024-22195
- SUG:NA
- DESC:fix CVE-2024-22195</changelog>
  <changelog author="weihaohao &lt;weihaohao2@huawei.com&gt; - 3.0.3-4" date="1715342400">- Type:CVE
- CVE:CVE-2024-34064
- SUG:NA
- DESC:fix CVE-2024-34064</changelog>
</package>
<package pkgid="2f27d62cff261a1fe2ff78789cd3a985c323dd272d6bd8c45e3170463872a6b2" name="python3-jwcrypto" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 0.9.1-1" date="1657022400">- Upgrade to version 0.9.1</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.4.2-1" date="1703073600">- Upgrade to 1.4.2 for fix CVE-2022-3102</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.4.2-2" date="1703851200">- Fix CVE-2023-6681</changelog>
</package>
<package pkgid="c2ce4e006f9a37f622035cbd25dd85694ce8a94d5cf01f65de611f24cece8043" name="python3-ldb" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="2.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 2.1.4-3" date="1626696000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:cancel gdb in buildrequires</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.1.4-4" date="1631016000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:remove rpath of libldb's binary files</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.1-1" date="1639569600">- Type:update
- ID:NA
- SUG:NA
- DESC:update to 2.4.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.1-2" date="1659355200">- Type:CVE
- ID:CVE-2022-32746
- SUG:NA
- DESC:fix CVE-2022-32746</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.1-1" date="1667563200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update libldb version to 2.6.1</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.1-2" date="1680350400">- Type:CVE
- ID:CVE-2023-0614
- SUG:NA
- DESC:fix CVE-2023-0614</changelog>
</package>
<package pkgid="4d7c0d2e2ad3218b58256a0a6f9ad33b34a246b3e338f632ead039e355b493a8" name="python3-ldb-devel" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="2.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 2.1.4-3" date="1626696000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:cancel gdb in buildrequires</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.1.4-4" date="1631016000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:remove rpath of libldb's binary files</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.1-1" date="1639569600">- Type:update
- ID:NA
- SUG:NA
- DESC:update to 2.4.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.1-2" date="1659355200">- Type:CVE
- ID:CVE-2022-32746
- SUG:NA
- DESC:fix CVE-2022-32746</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.1-1" date="1667563200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update libldb version to 2.6.1</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.1-2" date="1680350400">- Type:CVE
- ID:CVE-2023-0614
- SUG:NA
- DESC:fix CVE-2023-0614</changelog>
</package>
<package pkgid="ff5d1a6779bab9db3cd79046add60a49c752bff9c35e40f773e72870167ddf6d" name="python3-lib389" arch="noarch">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="348d377bc6ceb7dc0d4928c4383b71ca03aa60138c06bde7fb4458527d165ce9" name="python3-lib389" arch="noarch">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="7d5039503664750190f1d4a85fdfd9d7eb77e162a3f566a1c6bc0ffcaac8443c" name="python3-lib389" arch="noarch">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="3e984e2faabf7f50039832531d732891db234f163494120503226c1bec494777" name="python3-libdnet" arch="x86_64">
  <version epoch="0" ver="1.14" rel="4.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-2" date="1667304000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix Potential Null Pointer Dereference</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-3" date="1668772800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes '&lt; version' in spec</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.14-4" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="71eea7cc2e158e5d652d98133735bdb0f24523e07af967341b2a6b73e5c57a5c" name="python3-libdnf" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="4.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.48.0-2" date="1623153600">- Type:CVE
- ID:CVE-2021-3445
- SUG:NA
- DESC:fix CVE-2021-3445</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
</package>
<package pkgid="a074fa487a1845ddefd9df679164e9b3ecda9c4be78272d2db467ea29c1b04d7" name="python3-libdnf" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
</package>
<package pkgid="2af35f38eab5054f8fbf26cbd3c691af25cc84bbee49fcb6b0e12af68067037d" name="python3-libdnf" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="6.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
</package>
<package pkgid="3ea0389765d4c7f9d6211b099a7e21115468173f0ebe22a3da2ff5d41ea8e757" name="python3-libdnf" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="7.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
</package>
<package pkgid="c594a0c216f145b7e035d5304fdbf912cf5276143bf775cc36828e8e082ba1fa" name="python3-libdnf" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="8.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.69.0-8" date="1705320000">- Modify loongarch64 patch use all arch</changelog>
</package>
<package pkgid="2f950da47189342e7943ce507b3bd3652fd7a982bbf56f3e8a7ce436e1a09f05" name="python3-libmount" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="28.oe2203sp1"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-19" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
       backport-write-correctly-handle-wide-characters.patch
       backport-wall-convert-homebrew-buffering-to-open_memstream.patch
       backport-wall-use-fputs_careful.patch
       backport-hexdump-parse-handle-truncated-format-pattern.patch
       backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
       backport-lscpu-fix-p-output-all-caches-delimiter.patch
       backport-add-return-in-supam_conv-function.patch
       backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
       backport-sulogin-ignore-none-existing-console-devices.patch
       backport-sulogin-fix-KDGKBMODE-ifdef.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-20" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
       backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-21" date="1691064000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libblkid-jfs-avoid-undefined-shift.patch
       backport-cfdisk-add-hint-about-labels-for-bootable-flag.patch
       backport-logger-initialize-socket-credentials-contol-union.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-22" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-column-fix-buffer-overflow-when-l-specified.patch
       backport-column-fix-greedy-mode-on-l.patch
       backport-column-fix-memory-leak.patch
       backport-column-fix-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-23" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-scriptreplay-support-ctrl-s-and-ctrl-g.patch
       backport-login-use-correct-terminal-fd-during-setup.patch
       backport-login-prevent-undefined-ioctl-and-tcsetattr-calls.patch
       backport-libblkid-avoid-memory-leak-of-cachefile-path.patch
       backport-more-avoid-out-of-bound-access.patch
       backport-lslogins-fix-realloc-loop-allocation-size.patch
       backport-ldattach-don-t-call-exit-from-signal-handler.patch
       backport-libblkid-ntfs-validate-that-sector_size-is-a-power-o.patch
       backport-blkid-fix-call-to-err_exclusive_options.patch
       backport-libblkid-reset-errno-before-calling-probefuncs.patch
       backport-lib-path-fix-possible-out-of-boundary-access.patch
       backport-libmount-improve-mnt_table_next_child_fs.patch
       backport-libmount-fix-possible-NULL-dereference-coverity-scan.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-24" date="1705406400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
	backport-libsmartcols-flush-correct-stream.patch
	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
	backport-cal-avoid-out-of-bound-write.patch
	backport-libfdisk-sun-properly-initialize-partition-data.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-25" date="1708344000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:solve the issue of ext4 is incorrectly probed as drbd
        [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
        backport-libblkid-probe-read-data-in-chunks.patch
        backport-libblkid-avoid-aligning-out-of-probing-area.patch
        backport-libblkid-drbd-validate-zero-padding.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-26" date="1709899200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
       backport-libblkid-hfsplus-reduce-false-positive.patch
       backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
       backport-libblkid-drbd-reduce-false-positive.patch
       backport-lib-cpuset-exit-early-from-cpulist_parse.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-27" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
       backport-libblkid-Check-offset-in-LUKS2-header.patch
       backport-more-fix-poll-use.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-28085
- SUG:NA
- DESC:fix CVE-2024-28085</changelog>
</package>
<package pkgid="100511bebe6845554119c3305f6f0025ea716dcfd1a087fa2aaea277745e8b14" name="python3-libselinux" arch="x86_64">
  <version epoch="0" ver="3.3" rel="5.oe2203sp1"/>
  <changelog author="lujie &lt;lujie42@huawei.com&gt; - 3.3-1" date="1638964800">- update libselinux-3.1 to libselinux-3.3</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 3.3-2" date="1665316800">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-3" date="1686657600">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-4" date="1694433600">- backport upstream patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.3-5" date="1701864000">- backport upstream patches</changelog>
</package>
<package pkgid="02f3e73f5c0a27cc0a6393e1169e7e633a70dad323c8756b117d52b7e8ab4a6e" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="10.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-10" date="1708257600">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
</package>
<package pkgid="8f26c61896dc87fb05cfb6cdc5107198db6152620ecffe61bd4c57ede1c34e25" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="13.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-10" date="1708257600">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-11" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.14-12" date="1715860800">- Type:CVE
- CVE:CVE-2024-34459
- SUG:NA
- DESC:fix CVE-2024-34459</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-13" date="1716033600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
</package>
<package pkgid="b03e0893943fd86f23046be2453386833af7de5af6258d6da7f809d109d6fcf5" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-4" date="1644667200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-5" date="1646827200">- Type:CVE
- ID:CVE-2022-23308
- SUG:NA
- DESC:fix CVE-2022-23308</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-6" date="1652097600">- Type:CVE
- ID:CVE-2022-29824
- SUG:NA
- DESC:fix CVE-2022-29824</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-7" date="1655380800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks for xmlACatalogAdd</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-8" date="1656072000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
</package>
<package pkgid="6863ba2c4c430646358c0401d13f9386abc5184ed5549a4742b4d57ed71a97b2" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-8" date="1656072000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
</package>
<package pkgid="bd7a68a603467634233c189eca1e62200e580f784eb8890d0273afa4de786bd5" name="python3-lit" arch="noarch">
  <version epoch="0" ver="15.0.7" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 14.0.3-1" date="1655812800">- Upgrade to version 14.0.3</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 15.0.6-1" date="1671796800">- Upgrade to version 15.0.6</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 15.0.7-1" date="1675944000">- Upgrade to version 15.0.7</changelog>
</package>
<package pkgid="e7d69cf994a57f74b1129f0376d54f7c865bcda343338a1ac6be51fa234b2654" name="python3-louis" arch="noarch">
  <version epoch="0" ver="3.7.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
</package>
<package pkgid="833e49d0a2ff7ee14e564d164f75bdd6b860f2cec49ed9bd93f92af78b69ab82" name="python3-louis" arch="noarch">
  <version epoch="0" ver="3.7.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.0-6" date="1702296000">- Fix CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768</changelog>
</package>
<package pkgid="920030696c62c8888a7e15f9ea34ec1b171bc6c4d2c232dff98ebb5bef000fd0" name="python3-magic" arch="noarch">
  <version epoch="0" ver="5.41" rel="3.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@huawei.com&gt; - 5.41-1" date="1637928000">- update to 5.41</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 5.41-2" date="1666180800">- fix typos fxlb</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.41-3" date="1692792000">- fix CVE-2022-48554</changelog>
</package>
<package pkgid="04197c57b4cbfe75e54688653cc071a24c3fca4d4c29d4dc54c0aa99716b5d67" name="python3-net-snmp" arch="x86_64">
  <version epoch="1" ver="5.9.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.8-15" date="1631880000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix undefined behavior in asn_build_int()
       libsnmp: Rework parse_imports()
       libsnmp: Increase MAX_IMPORTS
       libsnmp: Allocate the module import list on the heap
       libsnmp: Fix a memory leak in a MIB parser error path
       libsnmp: Fix the getoid() error path</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.9.1-1" date="1639656000">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:update net-snmp to 5.9.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-2" date="1659960000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error which occasionally happened</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-3" date="1661601600">- Type:CVE
- CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
- SUG:NA
- DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
           CVE-2022-24808 CVE-2022-24809 CVE-2022-24810</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1:5.9.1-4" date="1664539200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
        IF-MIB: pass the network interface index to net
        IF-MIB: fix a memory leak
        IF-MIB: fix a recently introduced use after free
        IF-MIB: add a trailing newline to an error message</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-5" date="1672401600">- Type:CVE
- CVE:CVE-2022-44792 CVE-2022-44793
- SUG:NA
- DESC:fix CVE-2022-44792 CVE-2022-44793</changelog>
</package>
<package pkgid="aef3d87461c78d30a37998d735eb0d881193df02097e98213341df753ed5fec9" name="python3-newt" arch="x86_64">
  <version epoch="0" ver="0.52.21" rel="9.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-6" date="1651147200">- Type:requirement
- Id:NA
- SUG:NA
- DESC:rebuild package</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-7" date="1666267200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix warnings about never-read values</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-8" date="1675771200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:delete a static library file</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-9" date="1676030400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="6bd1affba97276dba452db31f637a86d50ca412c1ea34969b40d0025da0dcf45" name="python3-numpy" arch="x86_64">
  <version epoch="1" ver="1.21.4" rel="8.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.21.4-4" date="1653566400">- fix CVE-2021-34141</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1:1.21.4-5" date="1692273600">- Add loongarch64 and sw_64 support</changelog>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 1:1.21.4-6" date="1698667200">- Remove f2py from numpy package. It is in numpy-f2py pakcage.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.21.4-7" date="1706788800">- Do not pack open-source test case files</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1:1.21.4-8" date="1709208000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:make the test check</changelog>
</package>
<package pkgid="31846cfd87137e44cf2599c68b793e45f813b0b51bd817ed9a706054906f8080" name="python3-numpy-f2py" arch="x86_64">
  <version epoch="1" ver="1.21.4" rel="8.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.21.4-4" date="1653566400">- fix CVE-2021-34141</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1:1.21.4-5" date="1692273600">- Add loongarch64 and sw_64 support</changelog>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 1:1.21.4-6" date="1698667200">- Remove f2py from numpy package. It is in numpy-f2py pakcage.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.21.4-7" date="1706788800">- Do not pack open-source test case files</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1:1.21.4-8" date="1709208000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:make the test check</changelog>
</package>
<package pkgid="3b39a89d6920769da0f027d5d64ffe2b73edaef19d945cc3aedf3d09c43570f1" name="python3-openmpi" arch="x86_64">
  <version epoch="0" ver="4.1.4" rel="3.oe2203sp1"/>
  <changelog author="Pengju Jiang &lt;jiangpengju2@huawei.com&gt; - 2.1.1-20" date="1631188800">- solve the strip and rpath problem of safe conversion</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 4.1.4-1" date="1655726400">- Upgrade to 4.1.1</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 4.1.4-2" date="1659096000">- Reslove conflict with pmix-devel and update license</changelog>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 4.1.4-3" date="1692187200">- Modify the /usr/lib64/openmpi/bin path to /usr/bin</changelog>
</package>
<package pkgid="2248413e2b499794ff8bca26485d22d1495e9de0d383e1a4f2b9b4f141379b3d" name="python3-openvswitch" arch="noarch">
  <version epoch="0" ver="2.12.4" rel="2.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 2.12.0-15" date="1617105600">- fix CVE-2020-27827 and CVE-2015-8011</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.12.0-16" date="1627560000">- Type:cve
- ID:CVE-2021-36980 
- SUG:NA
- DESC: fix CVE-2021-36980</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.12.0-17" date="1627992000">- Adds python3-ovs as provide</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-18" date="1630497600">- Change the OVS startup mode to service startup.</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-19" date="1630584000">- Fix selinux preventing ovs-kmod-ctl err</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
</package>
<package pkgid="ba1da5ef5bc4fdefa802118361688314a59d070f0f11e3d35c950746e269871e" name="python3-openvswitch" arch="noarch">
  <version epoch="0" ver="2.12.4" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.12.0-16" date="1627560000">- Type:cve
- ID:CVE-2021-36980 
- SUG:NA
- DESC: fix CVE-2021-36980</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.12.0-17" date="1627992000">- Adds python3-ovs as provide</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-18" date="1630497600">- Change the OVS startup mode to service startup.</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-19" date="1630584000">- Fix selinux preventing ovs-kmod-ctl err</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
</package>
<package pkgid="8417765977fb5d453d679e9cba384e4a1173f00af6b362cad745dcb5741876e2" name="python3-openvswitch" arch="noarch">
  <version epoch="0" ver="2.12.4" rel="5.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
</package>
<package pkgid="91747b890298325458d877d86233d870f27982fa9b0b2e88eb119bc1874f61ec" name="python3-openvswitch" arch="noarch">
  <version epoch="0" ver="2.12.4" rel="7.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-6" date="1702555200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix file conflicts</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-7" date="1708430400">- fix CVE-2023-3966</changelog>
</package>
<package pkgid="69d9ef6112895e80d897faf102b56c61df5e3e86b24ce65baf412bd8d7a5fb86" name="python3-openvswitch" arch="noarch">
  <version epoch="0" ver="2.12.4" rel="8.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-6" date="1702555200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix file conflicts</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-7" date="1708430400">- fix CVE-2023-3966</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.12.4-8" date="1711713600">- Type:CVE
- Id:CVE-2022-2639
- SUG:NA
- DESC:fix CVE-2022-2639</changelog>
</package>
<package pkgid="3a31304648897f9831dae1d7324c857903026d0dfa8695cac14979e568031a52" name="python3-ovs" arch="noarch">
  <version epoch="0" ver="2.13.3" rel="2.oe2203sp1"/>
  <changelog author="Python_Bot &lt;Python_Bot@openeuler.org&gt;" date="1621512000">- Package Spec generated</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt;" date="1681819200">- Add Conflicts with python3-openvswitch</changelog>
</package>
<package pkgid="768c99971e01806f0b12be4730e47b5bbef600471d47c5795a18dc375cf333ad" name="python3-paramiko" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.8.1-2" date="1645876800">- drop invoke dependencies as it requires ancient pytest</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.8.1-3" date="1648468800">- fix CVE-2022-24302 and the rear patch of CVE-2022-24302</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2.11.0-1" date="1655985600">- Upgrade to version 2.11.0</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.11.0-2" date="1667217600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix error in sftp testcase</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.11.0-3" date="1704974400">- fix CVE-2023-48795</changelog>
</package>
<package pkgid="f076a74d0e423f979a7264bf22de40c7040643d71ed9241badd08750ec553f94" name="python3-pcp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="c0aab261f9d97c6d5ab2d4413322bf39fa0f12f5896a666eed3893eeb97a5eea" name="python3-pcp" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="3b7dc53120821a81fe1b39855d2e7c05abbde1092cf244508776d955556f49c2" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="fed41bce5fb50f676af05c89e1d77fb270129bf66b981c4789db173e1db5d5a8" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="544e460915146b3bdf8643e676b26c5435da3d1a6e8cbacc81db739f79048543" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="94683f41fb3c97731ffa2a25a76f3181351de3c244d434cbaef9db7b5c3bf9a3" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="e294eaf7873b7db7ca54b41374d0bb0c5097500ad92ac6e6474e2b46d1153a35" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="36f057340a44396ee846052910d2a28666e6ea5ef83532cf45f36e4fff9fbeff" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="7e2cc50c8cdab854d49de0554d6f27c2f1468b1ad92ccd5eb9646729097016b7" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="9fc73de653c9195a1e354858c7ff8cbb87a20f849530996f21964f65cb15349c" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="0a004b13b36f2cd4de2bc1733678fb86d8f37d752e92ef3f9af046bb14ad1a46" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="f43b1984237ad8a5589738dcf784703003a1b550b4c63d8a789c07a2542f6cac" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="d2cc046fcaa6f23ccab856d2aba1adef581924dade732fcb73c3de4c6c964352" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="b1f1c65dbc2ca7d03c7f6f170ba1dfdb270d9a623e9667d1a441f480517ec6ba" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="295c4732c64ca348377b59414c9d3d97a326fa319e0156519862e51578c133d3" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="a5540efbd6973f9883e499108d9691f73df7cdc2e0c879ab10bedbd79393fc38" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="5274d84b6aac67578be3fa28dcebbff642f3ca9753998d76b406f6a1591c7e17" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="f3a243c6949b5e9a972ae667a47e826e15ba346bdbe82701a34bbdbef0a4f725" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="8077615efe51c11c62d317dafa0fd2690c7e88aa8cf2a9ba7ebb7122b520d9ec" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="a510a19450d6345379832781ade6c00062e5a27a79d378a76a9d7f98f51748ee" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="c9f000f0f7ed614bb68c9915720533ca3d1f00a9ec35dc0ea11816bc1903092e" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="e8d7e8a55419660539b54b4659519b34cca917e34cc1c3e7904ede56b245e69c" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="1689d276de35abd9a5f90f295259df891b8bc5d9ff464066221154216378901c" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="2072f2418ebafde5c0e036c1eb25c98edcd4434a2d03255917c8118751344024" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="6dcc2df3f7110cab2dc3c6fd87f60b71e796f7c8c33a39136654fc0a9887f986" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="2761683dae8d2059c8656b641d76c795b6cf02c474fd81912d280d79907b37d3" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="9cd7a8b223ac646c399d970f5b5c8d6a7ffedee3304c9f302e82dc11d31f6462" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="8ed6ccf4b19f114e2c425a35ad50b0bb5b194e8264d26ac7008e10cfbb828e34" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="af55fa242d095b8b6060dc7fb9a6a2ebec5373e3eaeb5cc80fd23011433d5643" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="3637c8d283af8faf5ba4187007d38a52b840dbd73fd8f02d3ee7473a8dc4c2de" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="3e85ea98cff6653dfb35d2ecfde4694370d9519c4f051277b723a0920e4fe1eb" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="ed9312d35ca22fb970eed19033caf73aa4be5e831a1973bcf830fc310aca73a2" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="36c68ef006c5bd0004d134c0cb2fe44a9dfec6ec216578b76d39d8934ff64a41" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="bd693f045951da4ecc9e79d43bf194a8a03d4c7ddbe8019be7692cf997f38462" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="286430e024b74e39ef7eeeaaf8ef022c3e31919a07307a29ff32548c7f8b0617" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="5bac1e9e6bb8e6d2c16d72565788b9d9168469f95e4d309deca684f8e5ea085f" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="38b491f1c9c75d0e1a149fd97fb65f14fd0f14370c1013887732e63e5496ee73" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="9b52d0e22f33866f6664aca93e94cd260f7c5383ddcc67a8af811bca260eee0a" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="fca499c808e13344316ddb39d5fcc771702549ed431c91b23c79b4317016020b" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="32e2496a518238282ee595695e9dbe7376cb92f575831afafe5554cd4efaaefb" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="452a6b2c04acf271f9beab673d74f5f5d592d936702197bc13e083c8f1736e62" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="4d62eb547ccf91c6b2b3bafaf2f21feed6fa112477c52968686d24705f98c1aa" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="53960601e0f204ff5ff030f2525378e7481ebe17f2f2dd480d39f1d1ed90e74c" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="316e97f2b68f0d42432fe85c3d6cc22d7822fc2d054a749bb97419391d91320a" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="6ee54c3e46fed428f5bbbf489c847dbe5fbdfbc04064861e74b81646e3b81042" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="078e5ffc22240c256e7a01fc653155f16e1016e6d21f603dfc864756f9a92870" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="157b09cd6a55d284660d0b49a5dcc42c00f1bcdac5908eea8fcd236588f13d0d" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="5246d373677d11ae351a3acba79bb8bd195bb2add11df53410853548e95c554d" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="66a55d36d61cd34c9e7cd5704361f392c51032c711e9368432ac9405e139671c" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="44eedefcd5c9b0a80dbb399c7e76f94938e4cd13d88b027fba63ea3938f21582" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="9d661fdf52b4434d2ae4441c0f416538e69ac1f1ba16d37182244520f0172663" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="b53325a368058e6e3f5e0e29c20f5c058d5cb3960249ead9443e2130ac710e95" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="ffca0e2451f5fa2ead5b4b1078adfeb3704232840150178297ed501456317073" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="8a20c152b8753c9ff44068ecf450942776737f38349f43a2da53da2c08049078" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="df1d5461bdfcf3fedb461d1d4b96cdc161b333971a1016372939d368f7d94f34" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="aaa2b5dba24f041405a03567b9bd19433346744f34041e883cb24703d4660b73" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="bd43b9da42bdfa0738dddbcbec70815d1ff350b64c4d47dc93cca8950200e35a" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="bcda52b76c3ba02301069ce692d71eeebd54eecd7b0604b90493c88383fd3ccb" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="aa8f2e765e8082c1f7421908230c9715c5c9559b0a2de36b145462ba942de358" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="67b128769fbfbf59e87355660b2012853fe481d77f7579f67b608ead21ed4899" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="3d059c985b9b0a0f07075b29bd389128c0032c549e201a92a5bc66f2893d57fc" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="89fe80de6e8458134cb19b3f905ed80c5973c14d9eb2cede5dac5aa2aaaa5547" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="9b2c116435bcf3265c7849d9a5df1fad82cc75cf8c339148a56d2dc6a8ea3278" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="aef614470d74641d31c0b14fd7f93ee079d30664eb23233ffcc621fe7b835408" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="02936909f20d8db5e16746fc27adc671b2a2d9b48382689ba7a4a32c1a077551" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="1fd8f93eb97fd85ae9bea3ba3d569f53a09b345e7d036ecb8347360bdca4246a" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="2b038979b885b75720aaa5c5b17e04f8ab23d70bfdb61fb29a5e994586f46f04" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="0722c568b93a1d3503b805c611dacffc470afc4672163d259a9490ad11b59a6e" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="d3080b37c047f57f48eaaba49512b92e7aeb278435abb5d4c1cf1496502a36a6" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="d471013c24a6346c0f5be626f309bf4ff3f389a92f6073954f88657b763d54f9" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="cfd21d329257e69cb8afc8986a58c26b22e216d2e2cfbb5ef2b274ed49892f31" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="bcc74b548527ccf9b6e1669ee38ceeee591541140769bf817c29b88d2d117c14" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="ab32fe3ed107f4289702d677abb7aaf92fc0361e3a9187c45b9fa0ab7d5fe515" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="9e80423e062b0e25ea92d7ce8928e2cc44be5ae0140b7d83991ea88331f73251" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="2d334ae989c51303b0f153986600da7c4ce20b61bf1a9387488aed43231e8628" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="b42843568ae8557601e0d66eb296a420ee5f6d99aa281a4fd2854d4f02e99514" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="d2e88ada2810492763b6203e50b7867bc8f06906dbdf7def3e922de3f341e1bb" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="20ca15188729312ee5925dc73ecba81cc007d8c2abc7cb565e436596ec88d1f7" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="7e47ae1efb533c034ad2a2a22fcce7c535c6222d25861615bfb789b8889cbd51" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="ff409009b7e61b68a6315e887e736f32541653f2ca843f9949186318bfcfda93" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="7d85fa57502c2db0963b7dba16f72bd8325f4ea813b9f358befb8b085e9180ea" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="0a55e208989edce8c02d6bf1e56c5573714f5ee0cfb47beead2b8eca592cd970" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="cd19efdfb6b55b3592810695ba75527eca52a4e2153834f327f20a178e455946" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="a25df9e80cb2b1e703d4893d6d278aceecc422bd934d7e388e29a21a928fd94a" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="0396a58b68f54c0883cfd0770fd648c426a22b43a994cb84f2d63cf9971d83be" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="14bceb2fec64d1b69718ca22b87dbf9bfcd706c5caa3c11920c2736947a87f9e" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="4e68fe5d75ad375ba89e72ade28b60f6f501a179038f21e918281b8be9d1b680" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="70a3f21ce0e2756691e70159c04858d9b5024c7c2e7d8ae1c483c2136a1eee2a" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="9c37021c5f6db9605b7ff60e4cefdd1206f32f96f729465446251723777901a3" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="a1694102cc938811400ee3223face133172387ed6607212ed20c80b2e85197ba" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="783290c7612558452ed029add1af433eaf1a9e7305b149295f02d4847708e92c" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="4921b6352c8350f30bd2c0f5fba63f94d6954c99db845e09b7e683da14b4b1e6" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="8696598f929f4e62d8519556ff0707e320915050fac9ed040dbbf62a2f6158f9" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="47f0db5e941ce31c6bca12d0c450f9c929bdca26fcd309ddaab1f538f8defd55" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="821916cb1ac392833a68670aaac6ce5ea07c5b498e3a7d02197fa16a2daa8110" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="ebc0a1f42acd9658bcd4cc7a515a2fab15e62f5c1042380472c82d632a253ca3" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="d98af0283fb07093ad90b437d2eb0e07e4bda04760027d9ca4f3c2585cf9c6e3" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="1ab234f5a6a1b5cfdcab7061978934661b71824be228365ea50d9ff74abc1f67" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="f6d5779d8722888e4998aac0bfb5d9b6ee096e838f8cce4a3e2a6cf0235a0397" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="2d9738fca56d2790dccd08ea49e6fa798cbc998244e3c3e0fbf150a1361e7299" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="c339635afc58290666a3f0080fa2fae52484ded5f92f094c7462286470d95ca1" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="7999a1d09e76944e9db1025d5216842ad05787c037e0d72b0e8d30b48847ea21" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="6bbe381fbccbc2def3f9b8e26da678d257f20d4b36ed9daba6bbbf211d0bda9f" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="f4a3fc90a4c69d5bbe3ee52a922c1a1d1c841f63b27d24a6e6d78e2bbe31423f" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="d4878ae22b6a7769681a3d0762e73ef202ad7a49042016edd6dac445f6c8917a" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="4ede943b2e7769ba007e8281386d6302b4aa13ef44cae0d117e02b1017a32781" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="4fb8bdd4f44af06d92cb2b65a7338a9e9f9d9e6245ade210f86b8b818e3fe1c2" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="23739472d2829daee058cf5e5878675053095160946bcfa2289f3e0b692cb54a" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="9122630c0ec5de53d2ffd83c9b5476d4afd1d0bdd33442c89289a0a81d16ebb9" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="ff0d9c6bab175aa10d42db573560edfd7654ebb86faeb350a0f9202f4eaf431c" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="78cac726c2b48893008ba56e43a04a9384530141431215d3053a3d1063bafb30" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="2e5454131eeb6830463a867d5b523fb52a12f403f111ac4aa2bf98a85baa2395" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="c424bf382bb20abba36a8f256e22a5803a3d3505f2f571f174921a0c09c18dcc" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="743079c22f79b6d94be9bb14d97dba333699a1fd88883b363b89a812e3f0e02b" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="c0303eba6982f242822a2a11cbe0f1fd59725fa96ed970b172d1e58d14d94810" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="f2f1235f7199f79565edd8f774386e01f88c8c308d37048f77cf62d5c6e4aac4" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="f271e5912f9571d98a662a158d8c54f32f239a8d17efab61ecea527cd66516ce" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="ccab8c30b75462881d3f3e15eaf736dfbc756878fea3051943beea84c6754463" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="10246c358a0968f2c640c428ee8bd1981cad1d58b2756a0d3f19695119aba112" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="2cfac0f3c85bb53a1aed0ab25e0e4535e3407e544c69c5087bf404fc931a2862" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="d67c71c26166d0c22e5b44bbfda21c37b1e0a8498da0c7ff0a9fdfdc585b22d9" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="60e8ea7b4e759ff5ed724db56ede475d65b682918825e1752f5dcec601d15eb3" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="196201177bf84033d56634880b96a9f4645824d3cfac29f330f9d902a2ff93ef" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="af9e3034527088c3884afad28eff3f182fc5cd78ad1470329362dc315a8aa09b" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="4e5cb6ef286a5b6a521489080a23d3fb939976567c07565a1338f9695138ba5e" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="4c287d10e3349d434b3e43b1d8c9ce05576049ac2f90f1577da36698db9b9f42" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="74e2127e05d212bd0221fe1cc792f8f1e286ed3e8dd80932a01dbd1e9b8953ff" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="9420a22368518951fb7dd13851277609b414b14016c42e01e71b468a3d65bea5" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="cf58cf9a4258a750a27f958af0270560583fba03aacc57971f486f10f0e7c7e0" name="python3-pillow" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="4.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
</package>
<package pkgid="251192fd306d67fbadf2ce63d61cbd7ecf97a467d0f4b22af626c628b06d0ff3" name="python3-pillow" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="5.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
</package>
<package pkgid="e4fb4579f2ec03156222ea71c8dca3654c06ff7f1ff295a1246d11553437dd64" name="python3-pillow" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
</package>
<package pkgid="3fecbd50f24ce85177527c7b79d01e77bb2c89eebebc20917e22b90cc05db12d" name="python3-pillow" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="7.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-7" date="1712491200">- Fix CVE-2024-28219</changelog>
</package>
<package pkgid="fb7276e0e6df531bf504ac46a0a3d67da1af32dd19669e345dab9531260c2065" name="python3-pillow-devel" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="4.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
</package>
<package pkgid="26d08d840350e664fa80d3b0da83fb14a106c3da2b47e6e2bb8a38d6e10c92df" name="python3-pillow-devel" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="5.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
</package>
<package pkgid="6d61b0cf7d5fe783c4ace2793e8609d0e80ba23c26803223f5eaee6fa9b3c23f" name="python3-pillow-devel" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
</package>
<package pkgid="2789f4f5d5fe85b068f425c12d152e75194e467bc107a40e7689a325814cc4f7" name="python3-pillow-devel" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="7.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-7" date="1712491200">- Fix CVE-2024-28219</changelog>
</package>
<package pkgid="836d85383d1bc9a505d3022eb085959e18a50b8d6666c32967091d02043475b3" name="python3-pillow-help" arch="noarch">
  <version epoch="0" ver="9.0.1" rel="4.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
</package>
<package pkgid="c7af1d0afade9566ef6bfc08ddd27b19265d3a97d22e2327c6d0461f90506beb" name="python3-pillow-help" arch="noarch">
  <version epoch="0" ver="9.0.1" rel="5.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
</package>
<package pkgid="d2fc8ec1e2a88d1924cde96a778ba23c8dfb7dc294255d7ab6a3e46dca0c7fce" name="python3-pillow-help" arch="noarch">
  <version epoch="0" ver="9.0.1" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
</package>
<package pkgid="0dbd08cd111616c0423da666fa01ae17186ceb5a437f1d575c79ca1cc54d2179" name="python3-pillow-help" arch="noarch">
  <version epoch="0" ver="9.0.1" rel="7.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-7" date="1712491200">- Fix CVE-2024-28219</changelog>
</package>
<package pkgid="2ce108ea8c25e22d01d28b42ca93b72d5f84a32467580f9b3d9c7c1714ae5728" name="python3-pillow-qt" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="4.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
</package>
<package pkgid="ecc7ff9e70e38c893b73cc3202343bae2cac934883bfd44295aa2e21282a33bc" name="python3-pillow-qt" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="5.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
</package>
<package pkgid="16fc0bb52e1b4275a376079c555c23ec21486e673501ca78c673fed33e08e6cc" name="python3-pillow-qt" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
</package>
<package pkgid="0aaab10682b7a1e6deae6720c0d4eb806bf176630be6ca9512aeb1e40411bd3c" name="python3-pillow-qt" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="7.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-7" date="1712491200">- Fix CVE-2024-28219</changelog>
</package>
<package pkgid="dc1178ad16cf3b946dbc527c0a75528a5e597943f3daf8699b3333dac4359f49" name="python3-pillow-tk" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="4.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
</package>
<package pkgid="e66cd18fac09f2efd138ba32376049d0da64f101d6b4fc42f8db8f3897a18045" name="python3-pillow-tk" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="5.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
</package>
<package pkgid="e214083a53fa0a909f0763d9353e6af7cca71c4d3f5103d8028de0e25cf67300" name="python3-pillow-tk" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
</package>
<package pkgid="40cd539d4168b8ba9f66851dbc27d5428bd7820f4cf55aa484c5b6a2701030d6" name="python3-pillow-tk" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="7.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-7" date="1712491200">- Fix CVE-2024-28219</changelog>
</package>
<package pkgid="6d1280c28490071fff99d847710681f124f378d68b2c4ac91d4d484a2ac72422" name="python3-pycryptodome" arch="x86_64">
  <version epoch="0" ver="3.19.1" rel="1.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.11.0-2" date="1656676800">- enable check test suite</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.19.1-1" date="1704801600">- Upgrade to version 3.19.1 for fix CVE-2023-52323</changelog>
</package>
<package pkgid="9b1585a3020031f0e271f54347de130e01b0a81eea942d4378406defeb25e506" name="python3-pycryptodome" arch="x86_64">
  <version epoch="0" ver="3.19.1" rel="2.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.11.0-2" date="1656676800">- enable check test suite</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.19.1-1" date="1704801600">- Upgrade to version 3.19.1 for fix CVE-2023-52323</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.19.1-2" date="1708603200">- do not pack test case files</changelog>
</package>
<package pkgid="7e75a15875a8615c60a2f1619f4ce893199ee7e86ea59cdabc0871c80e678e50" name="python3-pycryptodomex" arch="x86_64">
  <version epoch="0" ver="3.19.1" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 3.15.0-1" date="1666180800">- Upgrade to version 3.15.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.19.1-1" date="1704801600">- Upgrade to version 3.19.1 for fix CVE-2023-52323</changelog>
</package>
<package pkgid="fed509edb6672daac1b478aec3fda4113d7b6e7913fffcd6f50d4fc5825cb55f" name="python3-pygments" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="4.oe2203sp1"/>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 2.8.1-1" date="1628251200">- Update version to 2.8.1</changelog>
  <changelog author="renhongxun &lt;renhongxun@huawei.com&gt; - 2.10.0-1" date="1640001600">- Upgrade version to 2.10.0</changelog>
  <changelog author="caofei &lt;caofei@xfusion.com&gt; -  2.10.0-2" date="1673870400">- fixed typo</changelog>
  <changelog author="caofei &lt;caofei@xfusion.com&gt; -  2.10.0-3" date="1674043200">- Fix "do concurrent" and "go to" keywords in the Fortran</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.10.0-4" date="1690372800">- Type:CVE
- CVE:CVE-2022-40896
- SUG:NA
- DESC:fix CVE-2022-40896</changelog>
</package>
<package pkgid="5a265bd4f5f72b78c8aebfb9ed828b1502afbfc68bb2ce85273a1ccfc7126d4d" name="python3-pylint" arch="noarch">
  <version epoch="0" ver="2.12.2" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.12.2-2" date="1704283200">- Fix "similar -d args" not recognized</changelog>
</package>
<package pkgid="f730b4181754ba29e068c7f98bc494a38db4b225f8a36ef6bdf5c06bc8a4d39d" name="python3-pymongo" arch="x86_64">
  <version epoch="0" ver="3.11.3" rel="3.oe2203sp1"/>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 3.11.3-2" date="1699444800">- Add missing error message to InvalidBSON error</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 3.11.3-3" date="1712491200">- Fix CVE-2024-21506</changelog>
</package>
<package pkgid="83b24a031accff4179f395c0d7cd51a284755ff62c50ea0d3356f646ea0b1b6e" name="python3-pymongo-gridfs" arch="x86_64">
  <version epoch="0" ver="3.11.3" rel="3.oe2203sp1"/>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 3.11.3-2" date="1699444800">- Add missing error message to InvalidBSON error</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 3.11.3-3" date="1712491200">- Fix CVE-2024-21506</changelog>
</package>
<package pkgid="84e05c5f69f91c8f8a2f11c7b0d5fdf64a8f76032173ac23f9944f6fe4699f03" name="python3-rados" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="63565e3e8212a5c98b7e3c0e23fd7eea6ce6921ce4b304c30ca2d6bb610ed9c4" name="python3-rados" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="b7d649f24827ea462107983feaa557d333fb978b735e1bc9be94768fd14f5266" name="python3-rbd" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="45a4269dfbf6ce7b2227dae5d00991fb3089c60c30efb758210855e85f0b24fa" name="python3-rbd" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="b6917291947a876b227fbd6474061a74e000d727081253de56e2a6e0dff19ab3" name="python3-reportlab" arch="x86_64">
  <version epoch="0" ver="3.6.10" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.4.0-13" date="1626868800">- Fix CVE-2019-17626</changelog>
  <changelog author="Chengshaowei &lt;chenshaowei3@huawei.com&gt; - 3.4.0-14" date="1641988800">- Fix can not import error</changelog>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 3.6.10-1" date="1655985600">- Upgrade to version 3.6.10</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 3.6.10-2" date="1687953600">- Fix CVE-2023-33733</changelog>
</package>
<package pkgid="1e7d4bef0c6bc8e740221143016978aff34fd87de871f695176909f538a924d4" name="python3-requests" arch="noarch">
  <version epoch="0" ver="2.26.0" rel="8.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.26.0-1" date="1638619200">- update to 2.26.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.26.0-2" date="1639396800">- provide pythonxdist(requests)</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.26.0-3" date="1640174400">- add python-charset-normalizer</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 2.26.0-4" date="1640865600">- Adapt to python 3.9.9</changelog>
  <changelog author="zhujunhao &lt;zhujunhao8@huawei.com&gt; - 2.26.0-5" date="1641902400">- modify build failed</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.26.0-6" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.26.0-7" date="1667649600">- Fix the mailman build error caused by the python-chardet update.</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.26.0-8" date="1685534400">- fix CVE-2023-32681</changelog>
</package>
<package pkgid="86d53460e23f3f87fce220876547ef6d7ca87225a13d65ef89ad487a72301a2e" name="python3-rgw" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="4beada8283f35fced9d649834dc449d2a629a6b361b49d98d9086386f0c264fc" name="python3-rgw" arch="x86_64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="4b34bb488e503468e8a499911813c9b249d9abf916d70e1e7387747d55b63f10" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.17.0" rel="32.oe2203sp1"/>
  <changelog author="xujing&lt;xujing125@huawei.com&gt; - 4.17.0-23" date="1672056000">- backport patches from upstream to fix resource leak</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-24" date="1677585600">- bugfix with upstream patches about fifo</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-25" date="1686657600">- Fix a copy-paste --help description of --whatconflicts</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-26" date="1686916800">- Fix a segfault on a non-stringable argument to macro call from Lua</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-27" date="1690977600">- backport some patches from upstream</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-28" date="1693310400">- Check inside --root when querying for files</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-29" date="1693915200">- Fix the coredump which may occur during upgrading of rpm</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-30" date="1694174400">- support _disable_auto_rebuilddb macro in posttrans</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-31" date="1695729600">- Fix potential segmentation fault</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-32" date="1702555200">- Fix regression on ctrl-c during transaction killing scriptlets</changelog>
</package>
<package pkgid="2bfd30744d653e28c86dd7632aed4e381d5061d9a3192dac9c13001fe68f7794" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.17.0" rel="33.oe2203sp1"/>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-24" date="1677585600">- bugfix with upstream patches about fifo</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-25" date="1686657600">- Fix a copy-paste --help description of --whatconflicts</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-26" date="1686916800">- Fix a segfault on a non-stringable argument to macro call from Lua</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-27" date="1690977600">- backport some patches from upstream</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-28" date="1693310400">- Check inside --root when querying for files</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-29" date="1693915200">- Fix the coredump which may occur during upgrading of rpm</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-30" date="1694174400">- support _disable_auto_rebuilddb macro in posttrans</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-31" date="1695729600">- Fix potential segmentation fault</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-32" date="1702555200">- Fix regression on ctrl-c during transaction killing scriptlets</changelog>
  <changelog author="gengqihu&lt;gengqihu2@h-partners.com&gt; - 4.17.0-33" date="1708516800">- Modify the version of zstd in Requires</changelog>
</package>
<package pkgid="7bdfacd14d9842027d1f1257b09e5e4e0a26d31be50511694c8b212e78a34bdc" name="python3-samba" arch="x86_64">
  <version epoch="0" ver="4.17.2" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-8" date="1660305600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ldb require version</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-9" date="1661515200">- Type:cves
- ID:CVE-2022-32743
- SUG:NA
- DESC:fix CVE-2022-32743</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-10" date="1661947200">- Type:cves
- ID:CVE-2022-1615
- SUG:NA
- DESC:fix CVE-2022-1615</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
</package>
<package pkgid="8cdfc65b1b2dd6c467aa1e9b437e9f74cdb25dadf15b9e7f882c8296a5b8d82e" name="python3-samba" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="10.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
</package>
<package pkgid="5a7e4b61ba6942eac7cecc8ee7616c90939e310004bf0ac8df76e78a93c71dfe" name="python3-samba" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="11.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-11" date="1705665600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:speeds up the creation of source rpm</changelog>
</package>
<package pkgid="ec87647663d6b9f17b8a48c1c07165151c236fabced2ca8427996051cab68151" name="python3-samba" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="2.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
</package>
<package pkgid="7cbbcbbeb2ebf2564d917d219e8a084c27369a932db5bf72038b496275c45b19" name="python3-samba" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
</package>
<package pkgid="ad5e82763c3ab65cdcaee8bff199974084d660954f44d6ca509d16342561c5a9" name="python3-samba" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="6.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
</package>
<package pkgid="63a19c9517b04a3b4a8abf4aed72af3fdfcefe8e5f028145443d416d2ca23d6e" name="python3-samba" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="8.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
</package>
<package pkgid="b8f19593fbd2b818f9768558cf2daf80a1c7b1d6fcc855bd0c435819af8f2bac" name="python3-samba-dc" arch="x86_64">
  <version epoch="0" ver="4.17.2" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-8" date="1660305600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ldb require version</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-9" date="1661515200">- Type:cves
- ID:CVE-2022-32743
- SUG:NA
- DESC:fix CVE-2022-32743</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-10" date="1661947200">- Type:cves
- ID:CVE-2022-1615
- SUG:NA
- DESC:fix CVE-2022-1615</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
</package>
<package pkgid="eae278cfa8e08d751719f049d065f4f3d534dc20a8ef2e3cb39933237af35b0e" name="python3-samba-dc" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="10.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
</package>
<package pkgid="211ca303dbb3562ee48dcffa3eaec916126e307f5dd4ef2791fefa38d3a6fd7f" name="python3-samba-dc" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="11.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-11" date="1705665600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:speeds up the creation of source rpm</changelog>
</package>
<package pkgid="df9e69c5a86027c70de3ffe9004c29ae3d32abaf02adfc07bc1ab5d80f5158cb" name="python3-samba-dc" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="2.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
</package>
<package pkgid="5c6e778c6adb0fa2fb7c460fdc350ca35958f19c481108b499e9b1660b128393" name="python3-samba-dc" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
</package>
<package pkgid="e2c21d4ab5a417307edfbf67f7de445bd0eda13570076497515cf0031dea1b12" name="python3-samba-dc" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="6.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
</package>
<package pkgid="4be65c44a7724f5437ed6b1768b9ba102b8f0acf5ad3861c24876f18f1ea876c" name="python3-samba-dc" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="8.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
</package>
<package pkgid="37784e5c9aafaa71af3784a7f78e90e3ebc9a5ae1f5159e8f4f2774119d3ee3f" name="python3-samba-test" arch="x86_64">
  <version epoch="0" ver="4.17.2" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-8" date="1660305600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ldb require version</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-9" date="1661515200">- Type:cves
- ID:CVE-2022-32743
- SUG:NA
- DESC:fix CVE-2022-32743</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-10" date="1661947200">- Type:cves
- ID:CVE-2022-1615
- SUG:NA
- DESC:fix CVE-2022-1615</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
</package>
<package pkgid="1ca4e3682a964c815507327da2abf7bba03c16faaf66c9320f82cdb0b5b1cc9d" name="python3-samba-test" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="10.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
</package>
<package pkgid="3cbc42040a6caab474a94000db2694f3ca7a253ccc4b07f716f851dc69d193e8" name="python3-samba-test" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="11.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-11" date="1705665600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:speeds up the creation of source rpm</changelog>
</package>
<package pkgid="e63371b3f4e1b1ba326421efe3fd95d9f90d84d7a98b8d4a86bd979267b996fb" name="python3-samba-test" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="2.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
</package>
<package pkgid="43b25beb0cef3b996579be5b5a645987b8b7ade39eca3b74fba327e9358f2ed7" name="python3-samba-test" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
</package>
<package pkgid="83476c1bf9d0f3d46995694659d88c1c6d0d69b30fb67b7ecd1010e83d288846" name="python3-samba-test" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="6.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
</package>
<package pkgid="6d5cf26708076948b2153f90e6e0070ff6d175334b39e9c9f1dbd6408a2435c5" name="python3-samba-test" arch="x86_64">
  <version epoch="0" ver="4.17.5" rel="8.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
</package>
<package pkgid="ca827d5bc9fb0aeb4b3812d38ee5f94f11d2698d975fd751862b83a807e3024f" name="python3-scipy" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="2.oe2203sp1"/>
  <changelog author="sunguoshuai &lt;sunguoshuai@huawei.com&gt; - 1.2.2-5" date="1627819200">- Fix build error with gcc 10</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 1.2.2-6" date="1627905600">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-BUG-fix-a-minor-refcounting-issue-in-Py_FindObjects.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-BUG-fix-small-refcount-issue-in-ndimage._ctest.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="zhangtao &lt;zhangtao221@huawei.com&gt; - 1.2.2-7" date="1630756800">- Strip Dynamic library</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.2.2-8" date="1631793600">- del rpath for some binaries and bin</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1.6.2-1" date="1640347200">- upgrade to 1.6.2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 1.6.2-2" date="1689249600">- Fix CVE-2023-25399</changelog>
</package>
<package pkgid="0d45dffaeb3bfdee5636f7ad4b43f641bc91f8f0506b7047a0eb39842eb2d4e5" name="python3-setuptools" arch="noarch">
  <version epoch="0" ver="59.4.0" rel="5.oe2203sp1"/>
  <changelog author="shixuantong&lt;shixuantong@huawei.com&gt; - 54.2.0-1" date="1617019200">- upgrade version to 54.2.0</changelog>
  <changelog author="renhongxun&lt;renhongxun@huawei.com&gt; - 59.4.0-1" date="1640174400">- upgrade version to 59.4.0</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 59.4.0-2" date="1640779200">- add bootstrap for rebuild python3-3.9.9</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 59.4.0-3" date="1641297600">- Bootstrap for Python 3.9.9</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 59.4.0-4" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 59.4.0-5" date="1672833600">- Type:CVE
- CVE:CVE-2022-40897
- SUG:NA
- DESC:fix CVE-2022-40897</changelog>
</package>
<package pkgid="9e4f4f43d8ac475a79814688281ab56f80d5855992d127701b186ee1b3b12683" name="python3-solv" arch="x86_64">
  <version epoch="0" ver="0.7.22" rel="2.oe2203sp1"/>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 0.7.20-1" date="1640433600">- update to 0.7.20</changelog>
  <changelog author="zhangjun&lt;zhangjun@kylinos.cn&gt; - 0.7.20-2" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leak when using testsolv to execute cases 
       Fix segfault on conflict resolution when using bindings</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.20-3" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ensure-duplinvolvedmap_all-is-reset.patch</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-1" date="1667908800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update libsolv to 0.7.22-1</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-2" date="1692446400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix requirement error</changelog>
</package>
<package pkgid="a2146c11bebd67163bf4113719a263ea5573ce80929fa0d7cfea311660d74151" name="python3-sphinx" arch="noarch">
  <version epoch="1" ver="4.4.0" rel="2.oe2203sp1"/>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 3.5.2-1" date="1627387200">- update to 3.5.2</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 4.3.1-1" date="1639396800">- update version to 4.3.1</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 4.3.1-2" date="1641470400">- fix docutils version error</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 4.3.1-3" date="1641988800">- revert openEuler-fix-docutils-version-error.patch</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1:4.4.0-1" date="1666872000">- Upgrade 4.4.0</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:4.4.0-2" date="1689854400">- html: Updated jQuery version from 3.5.1 to 3.6.0</changelog>
</package>
<package pkgid="cf66e940ac8f792ba3cfb59be9bd0d71a1824bb98b320d6d6361bd55153a17ea" name="python3-sssd" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="12.oe2203sp1"/>
  <changelog author="zhujianwei001 &lt;zhujianwei7@huawei.com&gt; - 2.6.1-3" date="1664193600">- delete broken link</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 2.6.1-4" date="1669118400">- delete duplicate file sssd-example.conf</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 2.6.1-5" date="1671537600">- fix cwe-394</changelog>
  <changelog author="zhouchenchen&lt;zhouchenchen@huawei.com&gt; - 2.6.1-6" date="1671624000">- backport some patch</changelog>
  <changelog author="zhouchenchen&lt;zhouchenchen@huawei.com&gt; - 2.6.1-7" date="1671624001">- backport some patch</changelog>
  <changelog author="huangzq6 &lt;huangzhenqiang2@huawei.com&gt; -2.6.1-8" date="1671883200">- fix coredump during ifp reconnect</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 2.6.1-9" date="1679572800">- backport upstream patch</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 2.6.1-10" date="1690977600">- backport upstream patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.6.1-11" date="1695384000">- backport upstream patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.6.1-12" date="1701172800">- backport upstream patches</changelog>
</package>
<package pkgid="6a112ba28cf35973fbb31200a4d22b57b1e743b0d5c3a788c887455e00a07e47" name="python3-sssd" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="13.oe2203sp1"/>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 2.6.1-4" date="1669118400">- delete duplicate file sssd-example.conf</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 2.6.1-5" date="1671537600">- fix cwe-394</changelog>
  <changelog author="zhouchenchen&lt;zhouchenchen@huawei.com&gt; - 2.6.1-6" date="1671624000">- backport some patch</changelog>
  <changelog author="zhouchenchen&lt;zhouchenchen@huawei.com&gt; - 2.6.1-7" date="1671624001">- backport some patch</changelog>
  <changelog author="huangzq6 &lt;huangzhenqiang2@huawei.com&gt; -2.6.1-8" date="1671883200">- fix coredump during ifp reconnect</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 2.6.1-9" date="1679572800">- backport upstream patch</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 2.6.1-10" date="1690977600">- backport upstream patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.6.1-11" date="1695384000">- backport upstream patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.6.1-12" date="1701172800">- backport upstream patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.6.1-13" date="1708603200">- backport upstream patches</changelog>
</package>
<package pkgid="c82451b78d184883855520f2e028169bda9c89b6b7df2a8a23964df681f8bf65" name="python3-sssd" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="14.oe2203sp1"/>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 2.6.1-5" date="1671537600">- fix cwe-394</changelog>
  <changelog author="zhouchenchen&lt;zhouchenchen@huawei.com&gt; - 2.6.1-6" date="1671624000">- backport some patch</changelog>
  <changelog author="zhouchenchen&lt;zhouchenchen@huawei.com&gt; - 2.6.1-7" date="1671624001">- backport some patch</changelog>
  <changelog author="huangzq6 &lt;huangzhenqiang2@huawei.com&gt; -2.6.1-8" date="1671883200">- fix coredump during ifp reconnect</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 2.6.1-9" date="1679572800">- backport upstream patch</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 2.6.1-10" date="1690977600">- backport upstream patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.6.1-11" date="1695384000">- backport upstream patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.6.1-12" date="1701172800">- backport upstream patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.6.1-13" date="1708603200">- backport upstream patches</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.6.1-14" date="1713528000">- fix CVE-2023-3758</changelog>
</package>
<package pkgid="f4bb10b2ae9d36f4c08664ca9ceffa3bd2306b4d29a909c270a57fe1eca3d98d" name="python3-tornado" arch="x86_64">
  <version epoch="0" ver="6.1" rel="2.oe2203sp1"/>
  <changelog author="yaozc701 &lt;yaozc7@foxmail.com&gt; - 6.1-1" date="1625745600">- Upgrade version to 6.1</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 6.1-2" date="1686916800">- Fix CVE-2023-28370</changelog>
</package>
<package pkgid="8bcc403a46b9f0691fe9260c94619d815b17644adec056906343ea95598e7325" name="python3-tqdm" arch="x86_64">
  <version epoch="0" ver="4.56.0" rel="4.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 4.56.0-3" date="1668427200">- change source path</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.56.0-4" date="1714996800">- Fix CVE-2024-34062</changelog>
</package>
<package pkgid="337a3a960d3e8eba7e85609dbf31e8ce9e3d768ad50bcd3f6c5dbc3aebb066b8" name="python3-uWSGI" arch="x86_64">
  <version epoch="0" ver="2.0.19.1" rel="5.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.0.19.1-2" date="1622462400">- Completing build dependencies to fix gcc compiler missing error</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; -  2.0.19.1-3" date="1630411200">- DESC: uwsgi add BuildRequires openssl-devel to support --https</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; -  2.0.19.1-4" date="1647691200">- The setup.py install is deprecated, use pip install instead to fix build error</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 2.0.19.1-5" date="1670241600">- Remove rpath</changelog>
</package>
<package pkgid="d60cb89167eddde502e26146e61314d3b92e737f69f429046959300a00e27aa9" name="python3-unbound" arch="x86_64">
  <version epoch="0" ver="1.13.2" rel="10.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-3" date="1647864000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix -q doesn't work when use with 'unbound-control stats_shm'</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-4" date="1654948800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove buildin key
       add macros to control if key files permissons is 600 or 644
       remove useless BuildRequires:unbound-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.13.2-5" date="1659528000">- Type:cves
- CVE:CVE-2022-30698 CVE-2022-30699
- SUG:NA
- DESC:fix CVE-2022-30698 and CVE-2022-30699</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.13.2-6" date="1663848000">- Type:cves
- CVE:CVE-2022-3204
- SUG:NA
- DESC:fix CVE-2022-3204</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-7" date="1677067200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix upstream issue #610 #611</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-8" date="1677844800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-9" date="1708689600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-50387 CVE-2023-50868</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-10" date="1709035200">- Type:cves
- CVE:CVE-2024-1488
- SUG:NA
- DESC:fix CVE-2024-1488</changelog>
</package>
<package pkgid="19a3f6ff176f6d33ec0bc679d03d777ce803c7074a07e458d750fb30c2e13143" name="python3-unbound" arch="x86_64">
  <version epoch="0" ver="1.13.2" rel="11.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-3" date="1647864000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix -q doesn't work when use with 'unbound-control stats_shm'</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-4" date="1654948800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove buildin key
       add macros to control if key files permissons is 600 or 644
       remove useless BuildRequires:unbound-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.13.2-5" date="1659528000">- Type:cves
- CVE:CVE-2022-30698 CVE-2022-30699
- SUG:NA
- DESC:fix CVE-2022-30698 and CVE-2022-30699</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.13.2-6" date="1663848000">- Type:cves
- CVE:CVE-2022-3204
- SUG:NA
- DESC:fix CVE-2022-3204</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-7" date="1677067200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix upstream issue #610 #611</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-8" date="1677844800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-9" date="1708689600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-50387 CVE-2023-50868</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-10" date="1709035200">- Type:cves
- CVE:CVE-2024-1488
- SUG:NA
- DESC:fix CVE-2024-1488</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-11" date="1709640000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change ExecReload to fix reload failure</changelog>
</package>
<package pkgid="5fe388ffa99f63897ae743ef566ef74912d9c3b31997af90f702b02f2d068611" name="python3-unbound" arch="x86_64">
  <version epoch="0" ver="1.13.2" rel="7.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 1.10.1-4" date="1622116800">- Type:bufix
- ID:NA
- SUG:NA
- DESC:Add the compilation dependency of gcc.</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 1.10.1-5" date="1629979200">- Type: requirement
- ID:   NA
- SUG:  NA
- DESC: unbound-libs remove Requires systemd</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.10.1-6" date="1630411200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix error when install unbound-libs</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.13.2-1" date="1638792000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update unbound version to 1.13.2</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.13.2-2" date="1643198400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:unbound-libs remove requires libpython3.8.so</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-3" date="1647864000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix -q doesn't work when use with 'unbound-control stats_shm'</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-4" date="1654948800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove buildin key
       add macros to control if key files permissons is 600 or 644
       remove useless BuildRequires:unbound-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.13.2-5" date="1659528000">- Type:cves
- CVE:CVE-2022-30698 CVE-2022-30699
- SUG:NA
- DESC:fix CVE-2022-30698 and CVE-2022-30699</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.13.2-6" date="1663848000">- Type:cves
- CVE:CVE-2022-3204
- SUG:NA
- DESC:fix CVE-2022-3204</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-7" date="1677067200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix upstream issue #610 #611</changelog>
</package>
<package pkgid="0b84d2aabdb0e9f2732ead1a3f87c8ffeaac0184b491efb519d6707969813ab9" name="python3-unbound" arch="x86_64">
  <version epoch="0" ver="1.13.2" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 1.10.1-5" date="1629979200">- Type: requirement
- ID:   NA
- SUG:  NA
- DESC: unbound-libs remove Requires systemd</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.10.1-6" date="1630411200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix error when install unbound-libs</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.13.2-1" date="1638792000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update unbound version to 1.13.2</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.13.2-2" date="1643198400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:unbound-libs remove requires libpython3.8.so</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-3" date="1647864000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix -q doesn't work when use with 'unbound-control stats_shm'</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-4" date="1654948800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove buildin key
       add macros to control if key files permissons is 600 or 644
       remove useless BuildRequires:unbound-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.13.2-5" date="1659528000">- Type:cves
- CVE:CVE-2022-30698 CVE-2022-30699
- SUG:NA
- DESC:fix CVE-2022-30698 and CVE-2022-30699</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.13.2-6" date="1663848000">- Type:cves
- CVE:CVE-2022-3204
- SUG:NA
- DESC:fix CVE-2022-3204</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-7" date="1677067200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix upstream issue #610 #611</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-8" date="1677844800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"</changelog>
</package>
<package pkgid="14e8a36ae4d617e88844dec3a2d0ef59214334d23533154f84d1340e2a0e71a7" name="python3-unversioned-command" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="24.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
</package>
<package pkgid="343170db35ef1b4f2de0e384220f3e0eb4adc9de1fda71de005d439c3264ba90" name="python3-unversioned-command" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="25.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
  <changelog author="zhaoyu &lt;zhaoyu64@huawei.com&gt;- 3.9.9-25" date="1691409600">- Type:CVE
- CVE:CVE-2007-4559
- SUG:NA
- DESC:Add a filter parameter to tarfile.extractall will allow users to avoid CVE-2007-4559 by changing their code/settings.</changelog>
</package>
<package pkgid="a25c96ec54ac9504f89996ca47f93a27aeb136c8a07f334898403646e455e9d9" name="python3-unversioned-command" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="26.oe2203sp1"/>
</package>
<package pkgid="a1424a872708ecf3b58c8672581bdba7a75eabd2e50650322bb57fd1db87288d" name="python3-unversioned-command" arch="x86_64">
  <version epoch="0" ver="3.9.9" rel="28.oe2203sp1"/>
</package>
<package pkgid="45ec4338bf378db623d72c3dfa81ad69c6a3d6f64675593e3204368a48cf2cf8" name="python3-urllib3" arch="noarch">
  <version epoch="0" ver="1.26.12" rel="3.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 1.26.3-2" date="1622548800">- fix CVE-2021-28363</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 1.26.3-3" date="1625486400">- fix CVE-2021-33503</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.26.7-1" date="1642593600">- update to 1.26.7 and remove python-nose dependency</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.7-2" date="1657108800">- add patch Bump RECENT_DATE and solve test case test_recent_date failed</changelog>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 1.26.8-1" date="1658145600">- Upgrade package to version 1.26.8</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.8-2" date="1660046400">- delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change</changelog>
  <changelog author="tianlijing &lt;tianlijing@kylinos.cn&gt; - 1.26.12-1" date="1662292800">- update to 1.26.12</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-2" date="1671278400">- DESC:fix util.parse_url function traceback when port have leading zeros</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-3" date="1676030400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change _HOST_PORT_PAT to fix port is 0 but return None</changelog>
</package>
<package pkgid="3445d8a9836100ffc9cee561cfd23874f4109206a76b2e058be409643e7adb95" name="python3-urllib3" arch="noarch">
  <version epoch="0" ver="1.26.12" rel="4.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 1.26.3-2" date="1622548800">- fix CVE-2021-28363</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 1.26.3-3" date="1625486400">- fix CVE-2021-33503</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.26.7-1" date="1642593600">- update to 1.26.7 and remove python-nose dependency</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.7-2" date="1657108800">- add patch Bump RECENT_DATE and solve test case test_recent_date failed</changelog>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 1.26.8-1" date="1658145600">- Upgrade package to version 1.26.8</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.8-2" date="1660046400">- delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change</changelog>
  <changelog author="tianlijing &lt;tianlijing@kylinos.cn&gt; - 1.26.12-1" date="1662292800">- update to 1.26.12</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-2" date="1671278400">- DESC:fix util.parse_url function traceback when port have leading zeros</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-3" date="1676030400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change _HOST_PORT_PAT to fix port is 0 but return None</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-4" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix socket timeout value when HTTPConnect is reused
       remove Exclamation mark character from the unreserved characters
       fix _idna_encode handling of x80</changelog>
</package>
<package pkgid="950df75c42c913079dc328132accd2d7542c2b7db3b8ef25601d448539ce5c9f" name="python3-urllib3" arch="noarch">
  <version epoch="0" ver="1.26.12" rel="5.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.26.7-1" date="1642593600">- update to 1.26.7 and remove python-nose dependency</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.7-2" date="1657108800">- add patch Bump RECENT_DATE and solve test case test_recent_date failed</changelog>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 1.26.8-1" date="1658145600">- Upgrade package to version 1.26.8</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.8-2" date="1660046400">- delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change</changelog>
  <changelog author="tianlijing &lt;tianlijing@kylinos.cn&gt; - 1.26.12-1" date="1662292800">- update to 1.26.12</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-2" date="1671278400">- DESC:fix util.parse_url function traceback when port have leading zeros</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-3" date="1676030400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change _HOST_PORT_PAT to fix port is 0 but return None</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-4" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix socket timeout value when HTTPConnect is reused
       remove Exclamation mark character from the unreserved characters
       fix _idna_encode handling of x80</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.26.12-5" date="1696420800">- fix CVE-2023-43804</changelog>
</package>
<package pkgid="92c043d29f002a502ec82070502efe4d493582a760439d2b7a2238d04e862e26" name="python3-urllib3" arch="noarch">
  <version epoch="0" ver="1.26.12" rel="6.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.26.7-1" date="1642593600">- update to 1.26.7 and remove python-nose dependency</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.7-2" date="1657108800">- add patch Bump RECENT_DATE and solve test case test_recent_date failed</changelog>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 1.26.8-1" date="1658145600">- Upgrade package to version 1.26.8</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.8-2" date="1660046400">- delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change</changelog>
  <changelog author="tianlijing &lt;tianlijing@kylinos.cn&gt; - 1.26.12-1" date="1662292800">- update to 1.26.12</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-2" date="1671278400">- DESC:fix util.parse_url function traceback when port have leading zeros</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-3" date="1676030400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change _HOST_PORT_PAT to fix port is 0 but return None</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-4" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix socket timeout value when HTTPConnect is reused
       remove Exclamation mark character from the unreserved characters
       fix _idna_encode handling of x80</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.26.12-5" date="1696420800">- Type:CVE
- CVE:CVE-2023-43804
- SUG:NA
- DESC:fix CVE-2023-43804</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.26.12-6" date="1699012800">- Type:CVE
- CVE:CVE-2023-45803
- SUG:NA
- DESC:fix CVE-2023-45803</changelog>
</package>
<package pkgid="abf99dcd49531353ca50c80b261e497809c7a3413cfb8932bcaad1ce5f2bda54" name="python3-werkzeug" arch="noarch">
  <version epoch="0" ver="2.0.3" rel="4.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 1.2.1-2" date="1640088000">- fix test failures due to unhandled exceptions being thrown without being propagated to caller</changelog>
  <changelog author="Ge Wang &lt;wange20@h-partners.com&gt; - 2.0.3-1" date="1666699200">- Upgrade to version 2.0.3</changelog>
  <changelog author="Bolehu &lt;heyaohua@xfusion.com&gt; - 2.0.3-2" date="1673092800">- fix typo and grammar mistake</changelog>
  <changelog author="Bolehu &lt;heyaohua@xfusion.com&gt; - 2.0.3-3" date="1673265600">- fix flake8-bugbear finding</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.3-4" date="1692014400">- Fix CVE-2023-23934 and CVE-2023-25577</changelog>
</package>
<package pkgid="8990357003ea5e1201a7259dc3adf6459101a39336d130c464f144babb228630" name="python3-wheel" arch="noarch">
  <version epoch="1" ver="0.37.0" rel="6.oe2203sp1"/>
  <changelog author="shixuantong&lt;shixuantong@huawei.com&gt; - 0.37.0-1" date="1640088000">- update version to 0.37.0</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 0.37.0-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 1:0.37.0-3" date="1697112000">- Fixed wheel pack duplicating WHEEL contents on build number</changelog>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 1:0.37.0-4" date="1697544000">- Fixed the non-standard format of changelog</changelog>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 1:0.37.0-5" date="1699444800">- Support unpacking wheels that contain files with commas in their names</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.37.0-6" date="1701950400">- Fix CVE-2022-40898</changelog>
</package>
<package pkgid="8ae938991020d56b42d44629d0572f3fa72e228dbac83b1d205b2a853f7278cc" name="python3-zbar" arch="x86_64">
  <version epoch="0" ver="0.23.90" rel="1.oe2203sp1"/>
  <changelog author="Chen Chen &lt;chen_aka_jan@163.com&gt; - 0.22.0-2" date="1642248000">- remove autoreconf for fix build error</changelog>
  <changelog author="hkgy &lt;kaguyahatu@outlook.com&gt; - 0.23.90-1" date="1667995200">- Upgrade to v0.23.90</changelog>
</package>
<package pkgid="aadfb17ddc636c785542aa9580718c8691c428c4fd6969f682a186b87972a656" name="python3-zbar" arch="x86_64">
  <version epoch="0" ver="0.23.93" rel="1.oe2203sp1"/>
  <changelog author="hkgy &lt;kaguyahatu@outlook.com&gt; - 0.23.90-1" date="1667995200">- Upgrade to v0.23.90</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.23.93-1" date="1706875200">- Update to 0.23.93 for fix CVE-2023-40889,CVE-2023-40890</changelog>
</package>
<package pkgid="52c6e70a90044b6e359d675653953f1618998b10b06971135bec3aa04bee3184" name="qemu" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
</package>
<package pkgid="8957d006e2825d4564ff9ab61326576488567d85f9bdaf9110363c76bf07c7bb" name="qemu" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="76.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
</package>
<package pkgid="8f680c6f9aeac1955fab49df2e699c35e53809ccb5d75bf30cbd5f22a7167c33" name="qemu" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="78.oe2203sp1"/>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091200">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
</package>
<package pkgid="c82ce24f3f0e363d3f9629a41be991799082610c1abbfa2a5770e8bbcce60669" name="qemu" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="80.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
</package>
<package pkgid="e09a6c2e5962debcb5c16b048f7da103dfb2dc9f31f5a6d21603bac4735f137c" name="qemu" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="83.oe2203sp1"/>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
</package>
<package pkgid="ad7b18adc9bd9c6f7b0d736fe8ba1fda9677688ef28c4542519c72cb28b1befc" name="qemu" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="86.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
</package>
<package pkgid="22715bc2e1f2848d4802ef28f6e9f190607150bc779e1dd6627ddc15ff9e2428" name="qemu" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="89.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
</package>
<package pkgid="c0a215462fe2eb619cd017459dc464e152162ebe1e144a68f9168548e4f438eb" name="qemu" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="90.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
</package>
<package pkgid="120231156319cd907bb0b21eb2b57f5bb2cd566f34aaee17c8d5a9091776894f" name="qemu" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="91.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667200">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667201">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
</package>
<package pkgid="7af8edbb0b0e223fe2bf3db82d6bc43110e1359ac413f0651536494aa2232a7e" name="qemu-block-curl" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
</package>
<package pkgid="21836f1cc04bdc55beaf21c7f21348b666d39f7c8c13eb681773732918cc8540" name="qemu-block-curl" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="76.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
</package>
<package pkgid="c429a1ff9cf88ad888eebe8516cf55c0e25ecbcaebac4b2fc375daf76cea289d" name="qemu-block-curl" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="78.oe2203sp1"/>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091200">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
</package>
<package pkgid="c064762041d11cbfb24ae4b957301b4f303a0b9efec2ab5661f3a85658bf6f1b" name="qemu-block-curl" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="80.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
</package>
<package pkgid="377c722ccfd5006b22731954fe6e34d9dd864b6fe2813baf41084f2c9df0d7bf" name="qemu-block-curl" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="83.oe2203sp1"/>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
</package>
<package pkgid="d3f6e8e5c5df7eef650c4fbc6cb85928f44bfe50a0cb93b2cd7407dda24cf389" name="qemu-block-curl" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="86.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
</package>
<package pkgid="2ad8b041ed7a9daea68f748f95011d92fb4aa6b4cb13bd8eaa2e2a07ec630cb2" name="qemu-block-curl" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="89.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
</package>
<package pkgid="6c4b949402013d2310b7a54cc473ecd378f24281a971bde52395f451228a7b5e" name="qemu-block-curl" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="90.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
</package>
<package pkgid="5b5589f67a712d29502d5e6c409a0c01f3029dd920dcff46617f741164866ce0" name="qemu-block-curl" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="91.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667200">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667201">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
</package>
<package pkgid="61b287976522016d64df5eb67d727b064e3e31626d8c90d696cb2423076a8a5b" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
</package>
<package pkgid="e0bfa5e32e7c9fa88d63776c72e41cace52885e1cec00c20fc87b7be0171f558" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="76.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
</package>
<package pkgid="2e5b926fd88ae09774bc23941f514a769b1005bb9312f7fe68aecb5486712bb4" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="78.oe2203sp1"/>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091200">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
</package>
<package pkgid="67831e6ae02aab668febad9710549797ef92ba321c44f1a3be8c2e226be766d1" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="80.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
</package>
<package pkgid="70a4028835d699f5868b835093db333cd1173c8b8d5d2459fc52b869e762ab10" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="83.oe2203sp1"/>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
</package>
<package pkgid="d488fc609a62d317fb714f0f62e5c9089fc3a1800e7dc89faddbaaac72056977" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="86.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
</package>
<package pkgid="b75a74a802916dc22a7f5e7a155e536696d7d9ec53447acabd49f73fba9890d1" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="89.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
</package>
<package pkgid="218bfde46d20f3520a4a39d0358f1cfc7ae68537bbdb6c2c233e6a2c964cc8a0" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="90.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
</package>
<package pkgid="86620e9e1f2a9814708c7e83da534536d5f59081f78e4bcc746646ed8205e25d" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="91.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667200">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667201">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
</package>
<package pkgid="d59d688edbe53f34d3e3dc53c8c8a3628bb92f2f982c170180fa938789d60292" name="qemu-block-rbd" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
</package>
<package pkgid="8d137f7405ebbc1cfadd75b0cf741cf0025a0f8db206c09ca0f1e4941596a97f" name="qemu-block-rbd" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="76.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
</package>
<package pkgid="95019f9b753848efcad3934e402bd970d0cc4aedd6a2e43b67aeb39624ffe835" name="qemu-block-rbd" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="78.oe2203sp1"/>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091200">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
</package>
<package pkgid="4fcc4f6fcf705cca02642cc6cfd5a2e8e23a5b7a0edf9acf5d2ca7b9e7f39313" name="qemu-block-rbd" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="80.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
</package>
<package pkgid="8d5600d5235c8621d6eb2fee02f27abbb5294b49620f8b2b770ba277381fc0e2" name="qemu-block-rbd" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="83.oe2203sp1"/>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
</package>
<package pkgid="333e34061a7cbc81ebe3310308905d17e0bb708f4278a3d9c6514ff273cdcfda" name="qemu-block-rbd" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="86.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
</package>
<package pkgid="25c6f67626fe09ff58647ffa1abdb2b0c0de05a83fbb0fc384e54421ae6396b7" name="qemu-block-rbd" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="89.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
</package>
<package pkgid="2670312db3d77c2da442c587404affd513d3a5f35885dbda8c78cb12f16f8911" name="qemu-block-rbd" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="90.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
</package>
<package pkgid="d6ffeca1f9f5a671d6b9fedac5bf2711ca032ad10de6e87cd2c97f6d0c69e132" name="qemu-block-rbd" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="91.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667200">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667201">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
</package>
<package pkgid="ae721908f4c314701a5a774919d98a82bc4818dadaf05363d7f28814d1ed9d25" name="qemu-block-ssh" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
</package>
<package pkgid="042c43b8453f56ddb459adb91a16a3f2f596911d208650945e6aa1bd12a3410e" name="qemu-block-ssh" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="76.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
</package>
<package pkgid="b45685b609f5d09af2b579cde268d97b73e64862d3ddcf43c2a6025a60e2ae4f" name="qemu-block-ssh" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="78.oe2203sp1"/>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091200">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
</package>
<package pkgid="68584d7a79d5ab012ef12185d6d31c83d26b094308b3bcfbcc4c1c009273b814" name="qemu-block-ssh" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="80.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
</package>
<package pkgid="1fa30f9ee285b366683d3095c4eeaa1334b91200fa1cd609d4eef5f268058d72" name="qemu-block-ssh" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="83.oe2203sp1"/>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
</package>
<package pkgid="1e3966eca0711fc06f2e24581cd9b6faaccb6c3b89a31de0146e3b959097ea5b" name="qemu-block-ssh" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="86.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
</package>
<package pkgid="b1625c0083e4225484dbdfcefd7ec994e763230e4ba2c1e829d978fffeecd473" name="qemu-block-ssh" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="89.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
</package>
<package pkgid="47b998e203ea8202485da1385e8cc40d53caf15617e41d22ee6c8e62ee8f4262" name="qemu-block-ssh" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="90.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
</package>
<package pkgid="97834d97a8febaeea827eadb13df1ec366eef229e12e0b4c8114411b92505abf" name="qemu-block-ssh" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="91.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667200">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667201">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
</package>
<package pkgid="784e57ac9bfd4382da97d9ac0cd0e10e46b134701a5fc35b580fdf2caf4fe9c4" name="qemu-debuginfo" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
</package>
<package pkgid="0265c722c054615ac828f72a2cfc236b5b34621e0664d860d0768fe5f730ccbf" name="qemu-debuginfo" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="76.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
</package>
<package pkgid="130829116c49953e269c774f3cef18270fc909e298745e87019a5b0845b7791f" name="qemu-debuginfo" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="78.oe2203sp1"/>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091200">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
</package>
<package pkgid="d73e540e518576180736ecb3706c44128693bd5f8bb35d03027490409cf198af" name="qemu-debuginfo" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="80.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
</package>
<package pkgid="058b3a278ed90f33bc7dd39f0f8125f20bb348dfea82f90c31c32efd4165f928" name="qemu-debuginfo" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="83.oe2203sp1"/>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
</package>
<package pkgid="338183f6cbbefd7a4ab65b555d4a724488e9871bd1752aa4b74a2a4961dd5f76" name="qemu-debuginfo" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="86.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
</package>
<package pkgid="ba3df3e869e75f68c527ba7b97dfac3def0c6737ac518211699a7e0487c9d4c9" name="qemu-debuginfo" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="89.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
</package>
<package pkgid="0306f62658006a42bae5da957bd92a4e1ed6cd0718d7aa5862b7939c4ad2c13e" name="qemu-debuginfo" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="90.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
</package>
<package pkgid="2903be04b2d0c183854670b1b3055e06d211ccdd2f6eb4544946d2c69accc13a" name="qemu-debuginfo" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="91.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667200">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667201">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
</package>
<package pkgid="9f7f51d5d2a2d0fc41992b6bbd55c99ef5a452de153a0f8ffac884244a7d368e" name="qemu-debugsource" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
</package>
<package pkgid="0e5deb6b759c83923ecd3ab9e061434572cd7b458a3197764c54ebd14a5278ca" name="qemu-debugsource" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="76.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
</package>
<package pkgid="7324d16b7768b7675253edf4b9a8a565ba4d99a668de5513abc75a05de72f602" name="qemu-debugsource" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="78.oe2203sp1"/>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091200">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
</package>
<package pkgid="e89ef61aa0bf26bdfd0b6722f6c1ea752cdeac98a4217a5689d484a59c201b07" name="qemu-debugsource" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="80.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
</package>
<package pkgid="93b3c1284b8b5c4c513b458de44405f0d55e55868ca2ed92500f25e86a3242fc" name="qemu-debugsource" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="83.oe2203sp1"/>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
</package>
<package pkgid="4adba88683da236541327948090c716a770debe114dc3b04d68b0083c355cc46" name="qemu-debugsource" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="86.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
</package>
<package pkgid="5ca77bb7d41b74d743da6c5c37baac118985a0cfcd593289edca1b06bdc3bcb1" name="qemu-debugsource" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="89.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
</package>
<package pkgid="4adbd0c9b64cf12b0563ba4c00c6be712537720cb9d160b8afecadcce86ed6be" name="qemu-debugsource" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="90.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
</package>
<package pkgid="c02622a4ac3018283c7061ad74c194de2d3b459d93a6f313e4a1752520e68070" name="qemu-debugsource" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="91.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667200">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667201">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
</package>
<package pkgid="d926067afb372761f31344fb1a44b176d0749893d4e60ffbbd00daa2a4a33c96" name="qemu-guest-agent" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
</package>
<package pkgid="9b860e0650e50f088243a491e7041ca3f070d106d0463b348d275a530245c834" name="qemu-guest-agent" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="76.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
</package>
<package pkgid="fb3453d9d467df45cf248ea297ce8ffd1a72e7861dd8a113a5b04ddd64d7899c" name="qemu-guest-agent" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="78.oe2203sp1"/>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091200">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
</package>
<package pkgid="e8340211ea450bff3ce026c435dd98e820c64c7a0093db53bb757484be0e34be" name="qemu-guest-agent" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="80.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
</package>
<package pkgid="f4d558476b78cceed40d4c43e29b9d4f072bd0bcde4688c4994d01cf0beda7f1" name="qemu-guest-agent" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="83.oe2203sp1"/>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
</package>
<package pkgid="83111fb18003bb2e86f5f6483ce1e6ceb134e35acafb0d6b38b55cc0fbd7db85" name="qemu-guest-agent" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="86.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
</package>
<package pkgid="b7f0201d114076b2dbbb937b01d2347ffd023913eaa1a4f632ba22046791d3c5" name="qemu-guest-agent" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="89.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
</package>
<package pkgid="eee9364ddab4fbb98c7200a2868d69318b0343770d3bbd026b6746d9f0bbd628" name="qemu-guest-agent" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="90.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
</package>
<package pkgid="945ebf9f444402a88f51d03b0cb940eb634a98c1bcc280815679d6f3f034885c" name="qemu-guest-agent" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="91.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667200">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667201">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
</package>
<package pkgid="dc8e36c916b08d98f4b0597e0a68a14c1d96b16f4e3563477d32a8ecda9d61a1" name="qemu-help" arch="noarch">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
</package>
<package pkgid="bc6c51e38cd2d16024d2fd4ac6e85ab851cd3d6639a26abd54653b7106d08a0a" name="qemu-help" arch="noarch">
  <version epoch="10" ver="6.2.0" rel="76.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
</package>
<package pkgid="32160775b908e90fab78837ab1beb411fde4cbd4fa6482e2bb23962874656d8f" name="qemu-help" arch="noarch">
  <version epoch="10" ver="6.2.0" rel="78.oe2203sp1"/>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091200">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
</package>
<package pkgid="c064f4c8f5ed835c54dd486e1e37f972ca92e4db7590b22f904c46e873477886" name="qemu-help" arch="noarch">
  <version epoch="10" ver="6.2.0" rel="80.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
</package>
<package pkgid="f5a648b694f4661579ade08db829b380c62a2f5daa4118dad2922d1db7f88e9d" name="qemu-help" arch="noarch">
  <version epoch="10" ver="6.2.0" rel="83.oe2203sp1"/>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
</package>
<package pkgid="bf7ec042923fd2b250b88de2bc4389873e8b3364df82a934e6a6585761d8c571" name="qemu-help" arch="noarch">
  <version epoch="10" ver="6.2.0" rel="86.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
</package>
<package pkgid="5a68df8a9241d58f5e65f1f1eb3be7b058a47108b1b50d5715c6bfc78701917e" name="qemu-help" arch="noarch">
  <version epoch="10" ver="6.2.0" rel="89.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
</package>
<package pkgid="7090baa0f417e5d3256c8476c8e54e9e544abfa54a5138813826647e1a2cdd01" name="qemu-help" arch="noarch">
  <version epoch="10" ver="6.2.0" rel="90.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
</package>
<package pkgid="99f23ce7663cd21e20f2c3c74791f37140b05c2d47678541e1253cbc6eddef02" name="qemu-help" arch="noarch">
  <version epoch="10" ver="6.2.0" rel="91.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667200">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667201">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
</package>
<package pkgid="2ba66b636f5480abdfe5df63fa291d000b59da1cd53294739521c2ac60121318" name="qemu-hw-usb-host" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
</package>
<package pkgid="218a52cf3e25efb56ec85ab291f084c0945ecca888a575b75b726bad5f1976ac" name="qemu-hw-usb-host" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="76.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
</package>
<package pkgid="2d07bc713d2c096295f9cbc5a78872ffb973544cd3cbd20e28a603417dfc6c27" name="qemu-hw-usb-host" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="78.oe2203sp1"/>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091200">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
</package>
<package pkgid="c515855453bf778cca48668256eb57a581af4cac73588563d23e66848dcf5142" name="qemu-hw-usb-host" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="80.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
</package>
<package pkgid="5bdaccfe73574f1a844d88ae8fc6c23f96785db766d956db8ade8c85dcd9cf15" name="qemu-hw-usb-host" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="83.oe2203sp1"/>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
</package>
<package pkgid="d168e970d99af88df360a310817d96691b675d5687ad08dc3c633fab819214fa" name="qemu-hw-usb-host" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="86.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
</package>
<package pkgid="e333608687c530838930ff1abc393ec4a7001cccde4cd29a1812476899bfe048" name="qemu-hw-usb-host" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="89.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
</package>
<package pkgid="e7e39d9feb1436a274a9f9fd21502eb6d3ea44bdf95c07869103cdb7eec8b69c" name="qemu-hw-usb-host" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="90.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
</package>
<package pkgid="1c46917a708226960650f5b603ddf62ffda67c29ec955514a9fdd4ed80b8d0e3" name="qemu-hw-usb-host" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="91.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667200">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667201">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
</package>
<package pkgid="04aa7ecec8bf6fe72b2eaf6b5db937377388550c62a2ab63c0c24868d7c5fd6d" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
</package>
<package pkgid="2f7d5622d8f265466afb87325878b220bdd904056ca30559aee5d28c7d6cd350" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="76.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
</package>
<package pkgid="823978c58cb77cbd4fcd0db3f34c7c2e6b6cc0f54d875bc662e968aed9556dc7" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="78.oe2203sp1"/>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091200">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
</package>
<package pkgid="ddfb63804be854afb44117a10e740971488316f1c709cd16b6a2f678befd61c3" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="80.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
</package>
<package pkgid="e7e7aaa03e3b7412b11671668c2deee13cba9679a228586608378792ef1ab57b" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="83.oe2203sp1"/>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
</package>
<package pkgid="c621dfaffb38e8913053e0932e6ba92a31912173c836d72bd35cbcbfa5d91ce0" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="86.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
</package>
<package pkgid="dbe26c4321e33c70e64c0b1e3f13d5972bc5bcb1bb93776d3e5420e63f8ed41d" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="89.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
</package>
<package pkgid="cf1fd98f5fa08b412a412fc203a2073e9ce54cd24710eefdef38b006c2ad9d10" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="90.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
</package>
<package pkgid="863f213d5c1d482dcbad3d78071e598f25ee76d0d5ea51439ad709d463a44666" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="91.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667200">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667201">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
</package>
<package pkgid="4d409265551d81dc26f5f9d1b9ce9b43dc0a4e43d976d7c9da7202e13de38598" name="qemu-seabios" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
</package>
<package pkgid="b6de64bcc62cf34e5e18ce5c7b0370937791cba0159e0cd625530227ba9b6234" name="qemu-seabios" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="76.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
</package>
<package pkgid="ece95822b31a7a6bd3ba1d2358810b0a52d12a5e5e2c791f6f946a16d9f0de89" name="qemu-seabios" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="78.oe2203sp1"/>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091200">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
</package>
<package pkgid="7db1f454626eec8dcc20d72cd08c38d7ffdd11568ceb4fff10c18960759c8c92" name="qemu-seabios" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="80.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
</package>
<package pkgid="a36edb05dffc49448883fc8bc04b8d70e34abbecc87751544c45a704f9179802" name="qemu-seabios" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="83.oe2203sp1"/>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
</package>
<package pkgid="b9498282914e69138e7ba260cde63c25fc21795cf1679631eaae75df96161d2c" name="qemu-seabios" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="86.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
</package>
<package pkgid="1bc0cbe850e5e11866d84b65c429c3236eb2ce1430a821fd76ec4765c691a828" name="qemu-seabios" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="89.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
</package>
<package pkgid="b2c80caf5e1390a281c56b91a83b231481b5a7a81429a5066e8fd1725d0a1a80" name="qemu-seabios" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="90.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
</package>
<package pkgid="d2d6069f9443d7615c732c7f19f57c063d5daff6256095425c7cda845feb0fad" name="qemu-seabios" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="91.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667200">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667201">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
</package>
<package pkgid="f1f9fcae4f9a8b142d62808090e2a4cd063ffa611264b1efd6f18aa42aa0f7de" name="qemu-system-aarch64" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
</package>
<package pkgid="0ab35d1130cce23ef2797e12dfb818ede31bf7c8c9a5297b74c983a24b4f956e" name="qemu-system-aarch64" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="76.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
</package>
<package pkgid="cd3b26acaf0d2f4de0538cbcb23d9ace5ce0bceeb765b459e9e6245d3dd71161" name="qemu-system-aarch64" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="78.oe2203sp1"/>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091200">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
</package>
<package pkgid="3ee05af4c7564372da00783079ccd4b68bce6a1874569926f28a15e9168a986b" name="qemu-system-aarch64" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="80.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
</package>
<package pkgid="fb4c146f6af44171f03d40165025f1523ffda4e342e16eb49dda4f20e9eae55f" name="qemu-system-aarch64" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="83.oe2203sp1"/>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
</package>
<package pkgid="7c7a47f06b88e344981b2dd1faf7cf59d5aeae17c462bd16b05db3b458ccc782" name="qemu-system-aarch64" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="86.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
</package>
<package pkgid="0ad7c9ee43c164eaca7298026a0708c50a0cf8b8032aa6c5832df9af343bc464" name="qemu-system-aarch64" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="89.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
</package>
<package pkgid="25d343cde09a9fc40808fc2d8e8cafa5ad9d84124e02aaa5979aa31cb22cd323" name="qemu-system-aarch64" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="90.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
</package>
<package pkgid="9a47e639a16af4f6513815f015316b5a01102aa6e3b1c981a8ee491650842a52" name="qemu-system-aarch64" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="91.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667200">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667201">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
</package>
<package pkgid="a5874101af5869866d58c634e87e22647bd659c9644134d9b0d3450dceb01f14" name="qemu-system-arm" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
</package>
<package pkgid="cc2a50c6d64776c2ef88da8fb5af61fa36aef3d22ffeb0d0f0017174d13ed775" name="qemu-system-arm" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="76.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
</package>
<package pkgid="b99ea8e7d17dd0aaa14d396c4a38fda0a656ff0db2ccfe7d11116b26d12d74a1" name="qemu-system-arm" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="78.oe2203sp1"/>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091200">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
</package>
<package pkgid="8fb64d26e08431c98577a91ade84b49ebb8bfc05ec7191162c8e5f0521006822" name="qemu-system-arm" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="80.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
</package>
<package pkgid="e583bad488e343f103892651c11ba73048a27af7e85e9eb1842f181650ecad08" name="qemu-system-arm" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="83.oe2203sp1"/>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
</package>
<package pkgid="2d7b9b64d5b7184128783a95bfda6d6c2c4e776819d19d27270bae117f8e3e19" name="qemu-system-arm" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="86.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
</package>
<package pkgid="ab58ddebd71cf514df5f8a3ce0eddab8f15915dd4bc7f5e3eaa5178b4146ef0b" name="qemu-system-arm" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="89.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
</package>
<package pkgid="0d428b15dd1d4f984d733f22e25f716a441ad1b821af45ce6481a2d8ca8a21d1" name="qemu-system-arm" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="90.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
</package>
<package pkgid="54dfa0b137b1ac090e6438570401463e28cdc796992e355112e510247176b526" name="qemu-system-arm" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="91.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667200">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667201">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
</package>
<package pkgid="5e3260234850063e9e88cbc0914e8b2f020206d5c004855e0e1e6a06136cd290" name="qemu-system-riscv" arch="x86_64">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option heade
[file cut: first 33554432 bytes kept]
[document cut: first 32103514 of 33550596 characters kept]
